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ABSTRACT 


The Aviation Command Safety Assessment (ACSA) is a questionnaire survey 
methodology developed to evaluate a Naval Aviation Command’s safety climate, 
culture, and safety program effectiveness. This survey was a manual process 
first administered in the fall of 1996. The primary goal of this thesis is 
to design, develop, and test an Internet-based, prototype model for 
administering this survey using new technologies that allow automated survey 


submission and analysis. 


The result of this thesis is a web site [http://spitfire.avsafety.nps.navy.mil] that 
adheres to a three-tier client/server architecture. The back-end SQL server 
database used to store survey information is accessed via front-end Java 
applets or Hypertext Markup Language (HTML) forms. Middleware components that 
complete the connection between client and server include Weblogic's 
Fastforward JDBC™ driver and Java servlets. The ACSA web site utilitizes many 
Internet technologies: Active Server Pages (ASP), HTML, Javascript, Active X, 
Secure Sockets Layer (SSL), CGI scripts, JDBC™, and Java applets and 
serviets. This thesis leads the reader through the research’ and development 
process describing how each of these technologies is used. Thorough review of 
this material is necessary for lifecycle support and future project 


revisions. Complete source code can be found in the appendices. 





TABLE OF CONTENTS 


tT. “INTRODUCTION ..2 tor ssw stands aes ee ee rer re eee ee ead 
A. PURPOSE...... ee ee eT ee ee ee ee ee ee 1 

3 HN 3719-12101 0 8 0B nee ag oe OR eee it. 12 

Cy. THRSTS. ORCANT CATION « cone. xis be Seki dr ed Ko eM aw eMedia eS 3 

Ds SOME ASSUMPTION So kcciocn sauce sh cleiaeo es eub edie 6.2%, Gleal ewe oe es E ecteden tee .. A 

Bi ST DENOTE MO ccaccsetc-Gracecere di d-w Bis ie Sa Ss ee oe ees ere ee 5 

Tis. DBC sc eeweseeteewe sear ceaepeercoe et da ia ae aaa a wae soe aces sar sea tas te tae etna aes 7 
Ai BRCKGROUND oi ise e-0a-i5 88 ee Glee wep ae ew wes BA eS A es eee ae SERS ay 

B.. dDBC IN THE ACS: PROUGCT o o25.5.0444.5 dei a hee eebaeek ee eteee es 8 
CAIRO CT Re ONS decease ed oes hb ee eee Wee eed ee neard ee 9 

De SELECTING A SUITABLE JDBC ™ DRIVER eiceds Xa eiieles<k cubed eases 12 

E. WEBLOGIC’S FASTFORWARD DRIVER.......... icaeiatahatdea deka a eta eee Gi 13 

Ri SARL MPS AND DBO caw sk cee cS a hee ee eden e Ria Se OR 14 

@. -CHECKING SURVEY NUMBERS ics 056 65-0 bese h4cGae ease este eee 16 

H. MAKING DATABASE ENTRIES........ccccccccccceces Fee ee es 19 

To THRO PRRSUUPS APPT RT vie 'h cece ao. 6 tbred Gee bee toler oe tk Bale we ene ee eer 23 

J CONCLUDING: REMARKS in4626 4 ok ewww ae ee des pola acmontra saps Adee ies 28 

61 5 RR <r = 0B Ka en EP PO apne Eg 31 
A. THE COMMON GATEWAY INTERFACE (CGI).........cccceeences ee 31 
Bs A CGL DEMONSTRATION» naw eodeatauseu ne aia Senedn Cae wee eans «282 
C. SUPPORTING SERVLET DEVELOPMENT. ....ccscccccccccecccccccscves 37 - 

Du: “SURVEYS BR V1 Ril eco atk dakar Whoa Saw aw ase be Be recsrer eee Sees me eT ere 40 

Ey. SRRVLOT ARCHITECTURE o x.w-wiiia-biessch eee oie Cae Os Aa ew OS EES A2 

F. CONFIGURING THE SERVLETRUNNER UTILITY. ........cccccccccccees 50 

G. CONCIUDING REMARKS S68 ee a ek i ee Oh SE ee ea ees 52 

IV. MICROSOFT’S ACTIVE SERVER PAGES (ASP) ...... ccc cece cece cece ce eceee 53 
Bs SRS P* BACKGROUND 4.6.5 o 25s on le le Ges aoe sad ww ciate es Wee ee 53 

Bi. ‘THE: ASE’ OBIECT MODE Dec iiderews- 28 4b eho eaneadadasSeweweeas 54 

Ls. “APPLICATION Obj eCt i445 database cteaaads eee ieee eatees 55 

O SESSION Obj CCt ics towwt- 4 ed cin ee OES EE SWS eee ee eee eee es 56 

Bs, REOURST Obj eCliidd sues tna ethene eet bauuate eevee hea 57 

A, “RESPONSE OD FSC o.6.0 sé w0i8. 6 ckcss ewe  Rae Saere hee reks B60 Se eee 58 

Bi SERVER Ob VECEsk4ie cab oe Meese abbas: Abies ictit om Walder anata hes 59 

G.. ACTIVEX: DATA. OBJECTS’ (ADO): (OBJECT (MODEL. 4.0% <4<i0wad Sula eencs 60 

de CONNECTION Obj GC 4.4 éo'hak teu Seed neneseanneoete eae 62 

2s. (RECORDSET. ODF OCU wine 60. steered es 66 SS 4, Hw SS ee ee RS oR alse 63 

Bc. (COMMAND +007 Ct ootun assed peu ee eee oes OR ae a tees 67 

Bic TERRORS OB) SCE sdGeoss ics err Sy en Scan ofa Mee estate we meatless 68 

De ACSA: WS Pie am Soya doen bos ee Re oS CRG le RS HOBO OE 68 

EB. ‘CONCHUDING REMARKS 2 «5. o4%.b cio ste Whea seeded eee eae aes 74 

V. ACSA SYSTEM DEVELOPMENT AND OPERATION. .......cccccccccccccccccsecs 75 
ie SENT RODUCTION 22505. 2.5. oon ht oa Bk oe heehee Woe eb Pn ee eee es 75 

B:. DATABASE DESIGN 4 vu~ioee esses oaed Pe ee ee ere 75 

CG; “THE 0b: SERVER: 625 DEMS oc o6-0ioa teers ei es Pane t Mad deed 79 

D. UPSIZING THE SURVEY2 DB ACCESS DATABASE TO SQL SERVER....... 82 

i WHE: SERVERS 5 :cnccao i dees doh win he aGaS wh ol SE eel bao S ee ee 83 

Bi: SWENDOWS INT SON GRCURT TY 2 hw ocr hiss ess bs Sa hE Cin ete es a eae 85 

Gs INTERNET INFORMATION SERVER (2TS) 2 s6i260tscesbioicdeueekdaws 92 

De Ree a Sis wid, Gs es SHES OE win Ee bE EE 93 

2. NT Operon: Pack Components. sinscicsce es oetisaeewa eee 96 


vil 





3... Tne. 21S Web: SEEVi Ces 6.4 nee wi Se we Sh we ce ee 2. 99 
4. Web Site DiLSCUuory SCCUTLLY< cc. t eee a ea tS ee eee bee 106 
5. Using SSL for Securing Web Site Communications......... 109 
6. Network News Transport Protocol (NNTP)................. 114 
7. Configuring Services Using the MMC Console............. 116 
8. Ports used by the ACSA Project............... er ee eae 118 
He. (CONCLUDING: REMARKS 6555 oe Oh 6 a lw el td. Ss Sa a! wow oe ee ae ee 119 
Vis “CONCLUSION: 37% qe Liuwaae Sees OS See heeees eee ees soaes ee i 
Fis JCEOSLNG FMA RR Geo es sono) wy losis ch Se deal we ea wa eae ne es ed ole wie toes, Bre seve 121 
B. AREAS - FOR FUTURE RESEARCH 2-0 ses ececs ‘sce w wk S oS we oie eee ecees eee 122 
‘C., ACSA PROJECT IMPLEMENTATION AND MANAGEMENT..........-eecee0 123 
GST. OF REP ERENCES d-e-iesae oie See a eaten eae We Rees aa eel ee Sse cee Whee Bes we a aera hy Oo LZ 
APPENDIX A. INFORMATION TECHNOLOGY FOR THE TWENTY-FIRST . 
CENTURY: SUT PZ Vie atge- ae tee & er kerk aera We each Re eG gw ee 127 
APPENDIX B. FASTFORWARD LICENSE AGREEMENT... . 2. cee wee weer nec ccc veces 133 
ds, -BICENGE “TERMS oiaide 5 che Gi ok 4 eee ds were Sed Se ae eete Se ee ek se rer 133° 
Ze WSL CES En Se EBS) sect ap erete- tie dase ac’, 64 eee) ate eca uns oe eee eee ees on @ ree 134 | 
3. ANNUAL MAINTENANCE AND SUPPORT ......... pla a as ahi ta rt eae Saat 134 
A INTERES 6.82 dn bneteaet daetnaded adsense eae koe es eid ciateae 35 
5. LIMITED WARRANY/LIMITATIONS ON LIABILITY . snitch Seis ean ec ho 
6. SOFTWARE CHANGES...... eigen Aig erga gcd we aceon ieee: We cee Gra bo aL Been ene 136 
2s, “OWNERS HiLE. se © eee ee ane ee ee es ose ae lea: Sore GE we aS BS Behe wales 136 
8. INDEMNIFICATION ...... Tosi fei pict wna bs acer tele. lai ne as ser He erate pita de Mc aNe ds Shaye ds 137] 
9... TERM AND. TERMINATION « «see eee cae were! we Pee ae eee Se Sd alee area are 137 
LO. UNITED STATES -GOVERNMENT RIGHTS o-oo: eee 6-8 4 doe S Soe tet ata ade 138 
ee Asem. COMPIGSLANCES. 6 6 sec. tie Gace Jo sepecere ase to oe Meters. eS weaves: 6a ask eh, Be es 138 
12. NON-ASSIGNMENT/BINDING AGREEMENT ........... eee a ree E39 
£3. MiESCEEEANBOUS 25. b i555) 6i5. 5:26 eee) old, ein: al area: he ei eyecare we ees Bae eee ae 139 
14s. DEFINITIONS isi ad 4.2.06 ohh tea ees Sie odiawmare eset a 139 
APPENDIX CC: “RESULTS APPLET - SOURCE. ‘CODE ee sce. o8 & oh Ooo eae lee BAS Swe eas 141 
APPENDIX D. SURVEY HYPERTEXT MARKUP LANGUAGE (HTML) SOURCE CODE..... 167 
Ay. A. BRIEF HISTORY: AND: BACKGROUND sou cbiee-G. So os Sa we Bra a a Ow hw 167 
Bi WHAT: 31S: IML? oso -ses © 5-8 ete Se Oe Sa ok he OES ae ae are Eee eee eases / 168 
Ga SURVEY: AT Miy (CODE cisSe: eae esd eee ons ear os See aR Se ote Seas See Let 
APPENDIX E. JAVASCRIPT ERROR CHECKING CODE............. peg acer iy ane sberaes 207 
Ay WHY “USE WJAVASCR IPL o 6 wus! wie Nerie:aive ie 6 eb ein Od eee Ge Gia: bree we we eS A 207 
Bs. JAVASCRIPT SOURCE “CODE awe sais sts 6S oS 6 eS a erehe. ree Ane oe. be ee See 208 
APPENDIX -F. ‘SERVERT SOURCE CODE. cava ceathe eee edneess Gna waeesees 213 
Re SURVEY ob RV bl coy Mis sere © Sie 4 eaters ates oe eee eee SE a ee ded Neo ees 243 
Be WRETE LORD Ei c2eV Bie eo: S656 oe Sas eee ee WS Se. eS, a Se, Be ws eRe 219 
APPENDIX G. SURVEY APPLET SOURCE CODE...... Oe ee ae ee ee eae eae 221 — 
is SURVEY WAVE SOURCE: CODE a6 se sei0:5: twee etek cares ecw a ed aaa e) Bie 8 hee oe 221 
Bs ‘QUESTIONNALRE; JAVA, SOURCE: ‘CODE -s a sea cecate ae awe! eee. Oe -Snele ee es Bee 221 
Cs. TUSERINEUT AVA -SOURCE-CODE <6 di oS ce eed eh beeen be eke eae ees 246 
D. ABOUTDIALOG.JAVA SOURCE CODE...... ts 2 Ava p pe Boat eg hpiow ce ae eSria ete ae vie. Zao 
Es OULTDIALOG JAVA SOURCE: CODE 6 iw. ole eV ecb eee Olid wis eee Ss Z22 


vill 











APPENDIX H. ACTIVE SERVER PAGES (ASP) SOURCE COD ies eet gue cet ewe eats 255 


APPENDIX I. ACSA PROJECT DIRECTORY STRUCTURE... ..... ee eee rere eee cees 259 
APPENDIX J. DEPARTMENT OF THE NAVY WORLDWIDE WEB POLICY............. 311 
INITIAL DLSERLBUTION iO Te1ssw eee ee ee eek ee aaa ie ee WS ae Oe ee Sard 


iX 


WWNM MMH MN NH NM NH fo 
NOrr wo DWAHD OS WD 


WWW WW W 
Orta! W 


m mE  W 





Lo 


b 
© 


ddl 





LIST OF FIGURES 


Applet communication with a remote data source.......... 9° 
. Making a. connection to the Survey? DB sci cisevenswess geek 
. Validating the client’s survey number.............. '.L7~-18 

The function makeDatabaseEntry............. Peele hae te 20-21 

THe RESULLS ADDLEC + 6.6644 ois 62 ee ioe ew sowie e sos ea eae 23 

BULGING -a QUETY.:<-2 Savio ea aha oe ae ee ae hea ae ees 24 

The -fUnCcE LOM proces sOUCry ives i.u ewe ware Soe Packer Sees Se 25-26 

The function queryServiceLocation.... cer eres recvecene 26 

The LUNnCeELON “COUNCRESDONSES sie est SESE Dhue Siew eee ai 

THe: £UNCt LOM CLSplayRata ok tru coe ieee ee Se eee eee 28 

The Cl ent / Server Connect One fio saws eee ous bee eee eee 33 

IIS Management Console (MMC) - using MMC to map the -.pl 

extension to the PERL executable....... cece ee cccccees 34 

The Lite. COlLVarS. Clie s 64.2b as kee ES REG eee eee ee 35 

OUEDUL OF Lhe COLVaLT Spl SCrLOts eieesri es wie earns 35-36 
\MGGtEying Cate’ Ss -CUASSPATH . oo tiie jcoas wen oie Stew eae 39 

SOrvlel. Arcns tecture. yt inn ees Ch ewe eee d awe as 42 

SULVEV SCT VC ee eG ie wo de eS oie ae Ge Se io ie ee ee enetete elas 42 

Servlet init method - performing resource-intensive 

operations........ vat asians gas dcceu ee essedae Lesen seus: a aie win Sem eens 44-45 
Overriding the doPost method to handle HTML form 

TOU ew ee ek ee Ga SS SS lod hk SS Sis owe ease ae ae Soe one 46 

parseFormData - getting the client’s input......... rr e 

Providing the method handleSQLException for client error 
WMOCIPICatlOn nese sss eb ote weed Sate se et oie ae 48-49 

surveyServlet flow control............. ee ee re es 50 

Starting the: Servlet runner. owas cone so 5.6 4s eeiwle Soleo we 6 eS St 

Comparison of ADO, DAO, and RDO... cc ccc c cence rece nns 61 

The ADO -Ob7 SCE MOdS kes ones alle eas we Hw ew Sees a as Be ees 8s 62 

The ASP application (test.asp) that uses ADO to interact 

with the ACSA Questionnaire database...............2068- 64 

The output of the ASP application test.asp............. 66 

Pie: Tile -Global casac wu. osm Gere acre os ee eens Soe wes 69 

ASP application displaying the contents of the Numbers 

Gea tavpase se idee sos oh oad dew Ss ae we a So oS owe eee ee 70 

Evaluating the Request object parameters passed by 

SULVEYNUMDErSLISE. ASPs 264 sel eae See we ew ele Ow 71 

The “form” view of the Numbers database (file | 

Sur veyNumoer Sli st 2ASp) salts oka wea eee es ae eS ee eee gas 

Processing application requests........... Sheeran aia 72 

ASP application AntCer action... is 46406 sense aw shee wa ee ee = 73 

SQL 6.5 Survey2 DB database tables as seen from 

MSACCES Sis % ws: tee ew Se ees a we he ee ee Sel Oe oe Ewa eee 80 

The spitfire Enterprise Manager window..........--eeeeee 81 

User Manager for Domai nsiscn wei oss bese esas eS Sass 87 

Changing user account: propertiesiciscosenxn secur news kee 88 

Using Windows NT Explorer to set directory. 

DEPM1SS 1 OS ietha eed Cats i-bd todas cs pee ba Gewese ees 90 

The InetPub share as viewed in Windows NT Explorer..... 92 

The Windows NT 4.0 Option Pack setup splash screen..... 95 

Running the Windows NT 4.0 Option Pack after is | 

Was: aiready anstalled:-s 3 v cashed sete craks were sod wide aren wane 96 

ACSA NEWSGLOUPS.. cece ewe cere cena ame wane ncsasssseressces 98 

IIS HTML administration interface.............2-.22- scot LOO 


X7 


ia 


000 Ww 





Trying to access HTMLA from a remote computer......... 102 
An expanded view of the default web site’s 


OPPSCEOY LCS 25ers ae oe ee Ree er Sa Be ee 9 HR eles ee WO ees Ge 103 
Web site master properties..... Lee eae Bae ee 104 
Customizing the: 10g “fi Lee isc eee Sop eae Sabena ea ee 10.9 
Anonymous Access and Authentication Control in the 

FU Ps cache pines tae aire eee ha code GG ad “are ase wh 6 Gwe oneal dial a wow Se nee 108 
Permissions on the ps Reena Gimcook Gi VeCCOLY «san ses 10.9% 
Key Manager icon in MMC...... Gist sire. erie arat Ed Wile Sa O70. we wees aie ee 
The Key Manager: appli Cations iia d peaks jae ie hese ese nes Ae Sa 
Creating a new key and binding it to the WWW 

SOUL COs a 6.8 ele dhe ia ere WE eS BOG Ee Oe eee ek Li3 
Successfully binding a key to the WWW service, as seen 

in. the Key Manager application. <6 .25 seat eee eee aa es 114 
NNTP Sérver Propert (6s.4-6-6ass and och a re ee ee oe 116 
Microsoft Management Console (MMC) used to configure 
Windows Ni Services sca ee Bow bh eee ee ewe ees ce ie, 
Default web site properties as peneigares through MMC.118 
Microsoft FrontPage (ExpresS Version) ....... eee eeeees 168 
Rea EM: OCS s. s6 aes as 5: Shes rhc a ute aes eae sede ee Be BO eee 169 
My Grocery List. The tags are invisible to the 

CO Ga es, pre eae ose eal cee ho eee eine Se SURenw ORS See bees 170 
An Alert Dialog Box - the client is notified of 
SUDMISS 1 OM SL LOCS sass Sica here wa esere ace Uo ener eens ae ete eile ace aes 207 


X11 





PhP Pe BB WWD NOD ND PD 
SHOP WHR NYFF OS® WD bE 


anon oo Oe S fb 
SOO PWN FH LO © 


ol Mm 





kr LO 0€ 





LIST OF TABLES 


JDBC CLAS SOS i iid 8:9 ech ais SS ash He ERR OHO ah SO es eee 10 
DEEVer CabedOr ies < 14 s6s-¢ ke eed ee bose 8 twee oe a Eee wes 12 
Ths: (NOM GTS "DB SCHEMAS se acele- awa ees Ge Se: eevee Sree ele es 16 
Extending the possibilities of client input............ 19 
Hypothetical selection box entries...... Cehe Acp weak ia. eee ace 24 
Project settings for PATH and CLASSPATH... .....ecceee es 38 
JSsdkvjar (Class: Files s2 < wscs ed wee Se bs acs, Laws wee eee eRe 39 
ERS App LACaeLOn OO] CCU ss wsis bee tain Pee eee ee eal eee ee 56 
SEE: BOSSI ON OD SCE shies wae g care ean are ea eres ev alec elie Me ca ae 57 
The five Request Ob JEct: Collect ons: o.08 side wc atwiw eta ces oe 
Phe RESpPOMSS 007 CCt cx nox Se sew ee oe Ra te hw es Se eee 58-59 
ActiveX components included with ASP................... 60 
PDO: GDISCES c 6 iuGh sit wcaca ere aes arden es oot cers Be a ee et ae ee 61 
Common collections, methods, and properties of the 
Connection object..... PE ge, PL ea ee ee er Pe a ae ee 62 
Methods and properties of the RecordSet object...... 66-67 
Command: :ODJECC Proper C1 SS 0s en iiss ee Oe ee ee eae 67 
JDBC™ objects and their ADO equivalents................ 74 
Survey2 DB Biographical Data table schema.............. 77 
surveyc DB Ouestions Cable Schemas ci sscs cont eotesiine aces 77 
The-Num Dist DEB table Schemas ss sii0ssetain Pee ee eee ears 78 
The Survey2 DB database device settingS.......sssecsese 82 
DEBCCTOLVY “PErMLSS TONS 50.6 sets Skee ea Ry bee ce we See eee 91 
ShaLe-PELMLSS1 ONS io: 9.4 wie wade ee eee we OR RES Oe as 92 
IIs HTML administrator files loaded in the virtual 
OLreCrory EI SAN a ude cle edew @ asad we en a ea em eS 101 
Result Of executing nslookup 206.39.12°4. . esas ceca 106 
RCSA. POETS ANG SOLVE CCS ss o-b ei: oo sirra wl Sate eae ae ook thea hy oa ee 118 


Worid. Wide Web: (WNW) —GOMpPORENES 6s. 4-ie4s ki wee ae CRs 167 


X117 





ACKNOWLEDGEMENT /DEDICATIONS 


To Barbara, Alexander, Lukas, and Trevor: Without your support, this never 
would have been possible. 
- Fred Mingo 


To my Dad: I never thought I'd follow in your footsteps, but I can't think of a 
better person I'd like to follow than you. | 


To Lisa and Jacob: The light is at the end of the tunnel. Thanks for your patience 


and perseverance. 
- Jonathan Held 


XV 





I. INTRODUCTION 


A. PURPOSE 


The purpose OL this thesis is to design, develop, and test a 
prototype system that supports the Aviation Command Safety Assessment 
(ACSA) survey process. Our goal is to replace the manual, 
labor-intensive efforts that were previously required to administer 
this survey with an automated, less costly alternative. 

The ACSA survey is part of an analytical methodology that was 
developed to help evaluate a naval aviation command’ s safety program 
effectiveness. In support of this program, our research will aim to 
examine several new and current web-based technologies, protocols, and 
standards for building Internet-based, client/server applications. Our 
efforts will culminate with the implementation of a prototype system 
that allows clients to remotely complete and submit the survey to a 
Structured Query Language (SQL) 6.5 database through the information 
medium that is the Internet. | | 

Building such a system serves two primary purposes: 

e it results in a reduction of the processing overhead that was 
formerly involved in the administration of the ACSA survey. 

Project managers will no longer have to mail surveys, tally 


results, archive data, or enter results into spreadsheet 
applications. 


e It makes the results of the survey accessible in a timelier 
manner to the customers that have a critical need for the 
information. Additionally, these results are updated dynamically 
and subject to a more exhaustive set of queries than what was 
possible apriori. 

By integrating existing Commercial Off-the-Shelf (COTS) products 
with solutions that are available free of charge, our prototype system 
costs very little. Hardware equipment was by far the biggest, single 
expense incurred, but because the cost of computers has been 
drastically reduced over the last year, it is becoming even cheaper to 
procure the equipment that is needed. The current prototype system uses 
a 300 MHz Pentium II running Windows New Technology (NT) Server 4.0 and 
Microsoft's Internet Information Server (IIS) 4.0. This configuration 
adequately covers the needs of the prototype system, and brought the 
total development cost to slightly less than $5,000. 








B. BACKGROUND 


The aircraft mishap rate has declined substantially over the past 
fifty years of Naval Aviation. Just twenty years ago, the U.S. Navy 
aircraft mishap rate stood at about ten aircraft losses for every 
100,000 flight hours. The loss rate has steadily dropped since that 
time to a present level of around two aircraft losses for every 100,000 
flight hours. But while the mishap rate has declined appreciably, the 
number of aircraft losses due to aircrew factors, or Raman error, has 
stayed relatively constant. 
| About 60% of the U.S. Navy and U.S. Marine Corps "class A" 
aircraft mishaps (those resulting in death, permanent disability, or 
loss of $1 million or more) are caused by aircrew errors. In the spring 
of 1996, naval aviation experienced a series of highly publicized 
aircrew error mishaps. Many of these mishaps became the focus of 
national media attention and even congressional investigation. In an 
effort to proactively address these mishaps, Commander Naval Air 
Pacific (COMNAVAIRPAC) chartered a Human Factors Quality Management 
Board (QMB) to explore ways in lowering the naval ae eeion mishap rate. 

While much attention has been paid to understanding human error 
in the cockpit, up until this time there was little veseanen concerning 
how organizational factors affected crew performance and safety 
[Ref. da The QMB recognized a squadron’s "safety climate" was a 
critical link in the mishap chain-of-events, but there was no data 
supporting these opinions. Dr. Anthony Ciavarelli, Naval Aviation 
Safety School, was appointed as the principal investigator for | 
measuring command safety climate throughout naval aviation as a whole. 
Specifically, his mission was to provide the QMB with feedback on 
issues concerning command climate, morale of personnel, workload and 
resource availability, estimated success of ongoing safety 
interventions, and other factors related to safely managing Naval 
flight operations. | 

Dr. Ciavarelli developed the ACSA questionnaire to evaluate a 
command’s safety climate, culture, and safety program effectiveness. 
This 6l-item questionnaire was administered by mail to 69 randomly 


selected navy and marine squadrons in the fall of 1996. The survey 


sample respondents were limited to flight-qualified naval aviators, 











from the commissioned officer ranks only. Additionally, these 
participants were assured that their responses were anonymous and would 
remain that way, and that all results concerning squadron ratings would 
be held in strictest confidence. The questionnaire was constructed 
using a Likert type seven point rating scale with verbal anchors, as 
follows: (1) Strongly Disagree, .(2) Moderately Disagree, (3) Disagree, 
(4) Neutral, (5) Agree, (6) Moderately Agree, (7) Strongly Agree. A 
"Not Applicable" category was later added to the questionnaire so | 
respondents could refrain from answering any question which was not 
relevant, or that they were not qualified to answer. In the end, a 
total of 67 units (97%) responded to this survey, for a total of 1254 
individual survey respondents. The results of this initial survey | 
provided invaluable insight into the safety climate of squadrons, 
wings, Type Commanders, and naval aviation as a whole. 

| Today, the Human Factors QMB is eager to update this previous 
study with one that is identical in scope, but can be administered in a 
more timely manner and require less processing overhead. Automating the 
ACSA will accomplish this, and it will allow the QMB to quickly and 
efficiently survey and simultaneously evaluate communities throughout 
naval aviation. Results from the application of the automated ACSA will 
be used as they were before: to improve the safety process at the local 
command level, and to encourage overall process improvements in all 
naval aviation units. Such information regarding command safety 
effectiveness iS an important step in accomplishing the U.S. Navy's 
long-term goal to dramatically reduce the number of aircraft mishaps 


and loss of life. 
GC. THESIS ORGANIZATION 


This thesis is organized into the following chapters: 


e Chapter I: Introduction. This chapter provides an introduction ' 
for the thesis and the reason for research in the specific topic 
area. 


e Chapter II: JDBC™. This chapter outlines how JDBC is used in the 
ACSA project. JDBC™ is the primary means of communicating with 
Relational Database Management Systems (RDBMS). This chapter 
describes how the ACSA project uses Java™ applets and database 
drivers for communicating with remote data sources, what 
restrictions are imposed upon these applets, minimum client 
requirements for using this system, as well as common security 
considerations. 





e Chapter III: Java™ Servlets. Servlets are a Common Gateway 
Interface (CGI) substitute that allow development of server 
applications that can be run by remote clients. Servlets are far 
safer than CGI because of the Java™ programming language, and how 
servlets are used is the subject of this chapter. 


e Chapter IV: Microsoft Active Server Pages (ASP). ASP is an 


integral part of the Active Platform, Microsoft's core Internet 
Strategy. ASP is actually a component that is installed on top of 
Microsoft's Internet Information Server (IIS) and processes files 
that have a ".asp" extension. Once the file is processed, IIS 
returns the output to the client’s web browser. ASP applications 
complement web development and tools such as Visual Interdev 
facilitate the creation of ASP database applications. An overview 
of ASP, and how it was used in the ACSA project, is detailed in 


this chapter. 


e Chapter V: Database Design and System Operation. This chapter 


discusses the database products and applications employed for the 
ACSA project. Topics include a discussion on design decisions 
made during the development of the ACSA database, the use of 
Microsoft Access and the upsizing utility, and how Microsoft’s NT 
Server 4.0 and IIS 4.0 are incorporated and configured for this 


project. 


e Chapter VI: Conclusions. Here, we present an. overall assessment 
of the automated ACSA process. We look at performance issues and 
make recommendations for future research and application. 


D. SOME ASSUMPTIONS 


In order to make the ACSA site accessible to as many clients as 
possible, we developed software code to accommodate versions 4.0+ of 
Netscape's Navigator and Microsoft's Internet Explorer web browsers. 
The reader should know how to use these products. Additionally, he or 
she should have a basic understanding of programming language 
principles and how to use Structured Query Language (SQL), the 
specification used to talk to databases. Many of the chapters reference 
Java™ code and explain what portions of the code are used for, but the 
full context of what is going on and why can only be gleaned through 
meticulous examination of the complete source code. Aside from these 
minimum requirements, we have gone to great length to provide detailed 
descriptions of how a system is properly configured and how you use the 
technologies we employed. Once you have read this material in its 


entirety, you should feel comfortable enough to do what we have done 


and implement your own Internet-accessible database. 











E SIDENOTES 


On March 3, 1997, the U.S. Navy promulgated a policy called 
Information Technology for the 21st Century, or IT-21, which stipulated 
the minimum hardware and software requirements for Department of the 
Navy (DON) Information Systems (IS). IT-21 was intended to afancendice 
DON-wide IS development, and as such, we have adhered to the policy's 
guidelines. Each component of the prototype system currently meets the 
IT-21 specification. To learn more about IT-21, and what requirements 


it places on developers, see Appendix A. 








II. JDBC™ 
A. BACKGROUND 


Prior to the advent of JDBC™, programmers had few choices as to 
how they could get their applications to communicate with Relational 
Database Management Systems (RDBMS). By far the most common solution 
was to use Microsoft's Open Database Connectivity (ODBC) Application 
Programming Interface (API). This API allowed developers to use a 
standard set of Structured Query Language (SQL) statements in any 
application, and it would translate commands into a syntax that 
database servers could understand. But for all ODBC allowed you to do, 
it had a number of attributes that made it difficult to effectively 
use: 


e ODBC was written exclusively in the C programming language, so 
there was no concept of objects or methods. The logical 
organization that is indicative of Object Oriented Programming 
(OOP) was nowhere to be found, resulting in a great deal of - 
frustration when you were trying to find the right procedure 

or function to call [Ref. 2]. 


e The API was extremely large, hard to follow, and required an 
intimate knowledge of the entire API if you wanted to make it 
work for you [Ref. 2]. 

In March, 1996, Sun Microsystem’s stepped in as a database 
communication provider. It was at this time that the company introduced 
its JDBC™ API, which is a set of Java™ objects and methods used to 
execute SOL statements on RDBMS. JDBC™ quickly caught on as an 
alternative solution for interacting with data warehouses because it 
was so easy to use. It presented the developer with a small object 
model that you could quickly learn and then use in Java™ applications. 
Because it embraced the OOP paradigm, it had a greater degree of 
logical organization than ODBC [Ref. 2]. 

For the last several years, Java™ and JDBC™ have proven their 
worth as critical components in successfully expanding the presence and 
potential of network-based client/server database computing. It is hard 
to navigate the Internet today and not see both of these components at 
work. And because JDBC™ is part of the Java™ Virtual Machine (JVM) 


specification, its continued use is altogether guaranteed. 





B. JDBC™ IN THE ACSA PROJECT 


JDBC™ is not part of the core Java™ programming language but is 
included for use in the package java.sql. Because it is part of the JVM, 
web browsers that provide applet support also natively allow you 
to use the objects and their methods from this package. Unfortunately, 
there is one more, costly element that is required in order to use 
JDBC™ - the driver. A driver is a program that interprets your JDBC™ 
calls and converts them into a syntax that can be used for two-way 
communication between your program and a database server. Once the 
driver is properly installed, you are ready to begin. Discussion on the 
driver we chose, its comparative cost to other commercial drivers, its 
installation, and the different types of drivers available are 
presented later in this chapter. | 


The ACSA web site, located at ([http://spitfire.avsafety.nps.navy.mil] has two 


Java™ Goeeete that use a driver and.JDBC™ to communicate with RDBMS: 


e The Survey applet allows ne client to download a Graphical 
User Interface (GUI) application that has ten biographical and 
61 survey questions. The applet ensures that all responses are 
answered correctly and completely, and it confirms the user is 
authorized to input information before forwarding the data for 
input to the backend SQL Server 6.5 database. © 


e The Results applet is also a GUI application that allows the 
client to query the results of all survey submissions. This 
applet is extremely flexible because it allows the user to 
narrow his query criteria by specifying the question number 
and any combination of community, service, status, or 
location. Results are presented in a colorful histogram which 
is based on the range of responses. 

No matter which applet is being used, the procedure for 
communicating with the back-end data warehouse is the same. When the 
client wants to input or retrieve information, he must wait long enough 
for the driver to be loaded. This temporarily halts program execution 
and depending upon the client’s network connection speed, can take 


varying amounts of time. Once the driver is loaded, the application can 


begin processing its JDBC™ calls (see Figure 2.1). 
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Figure 2.1. Applet communication with a remote data source. 


The ACSA project also allows the client to interact with a remote 
data source using an HTML form. This form contains the same questions - 
as the Survey applet and was developed primarily as a secondary means of 
submitting information should the client not have the computing 
resources necessary for using applets. For information on how the HTML 
front-end works and its interaction with a Java™ technology known as 
servlets, the reader should refer to Chapter III. The client 
requirements for using the Java™ applets are listed on the home page of 
the ACSA web site. | 

As a final sidenote, future developers of the ACSA project should 
be aware that the survey database is named Survey2_DB. There is also a 
second database, Num_List_DB, that is used to authenticate survey users. 
Both databases were initially designed using Microsoft Access, then 
“upsized” to a SQL 6.5 database using an Access plug-in. For more 
information on how to upsize a database, and a brief overview of how to 
use the SQL Server 6.5 Enterprise Manager, the reader should refer to 
Chapter V. | 


Cc: JDBC™ CLASSES 


JDBC™ implementation is provided by the java.sql package, which 
contains the classes and methods as shown in Table 2.1. In this 


section, we will attempt to give you a very broad overview of the JDBC™ 








object model, specifically looking at the primary purpose of each 


object. If additional information is required, the reader can find API 


documentation at [http:/Awww.javasoft.com]. 
Related Classes 


Driver java.sql.Driver 
java.sql.DrnverManager 











Connection 
Statement 







java.sql. Statement 
java.sql.PreparedStatement 
java.sql.CalllableStatement 


java.sql.ResultSet 
iava.sql.SQLWarning 

java.sql.DatabaseMetaData 
iava.sql.ResultSetMetaData 

java.sqlDate Java.sql.Time 
java.sql.TimeStamp 
java.sqlDataTruncation 


Table 2.1. JDBC™ Classes. 















The topmost class in the JDBC hierarchy is the DriverManager. This 
class provides an indispensable object that you must explicitly create 
at least once in your JDBC™ program. The DriverManager is an important, 
necessary part of the object model because it maintains a list of 
registered database drivers, i.e. drivers that you intend to use in 
your application. When you create this object, its constructor requires 
that you pass it a string. This string represents the directory 
hierarchy and driver class file name on the remote machine. Without 
this information, there is no way the applet’s ClassLoader could get the 
required files, and hence, communication with a remote data source 
would be impossible. 

Once the driver is properly loaded, you need some means of 
indicating what data source you want to talk to, and where that data 
source resides. JDBC identifies a specific database by using a Uniform 
Resource Locator (URL) that has the following syntax: 


jabc:<subprotocol>:<subname:port/ DSN> 


By using the DriverManager’s getConnection method, we provide this 
information. The URL that is passed to this method is: | 


jdbe-ff-microsoft:/ / spitfire.avsafety.nps.navy.mil:1 433/ <DSN> 
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where DSN represents the Data Source Name of the database we want to 
connect to. The URL we use has the subprotocol ff-microsoft, which serves 
as a reference to the FastFoward driver we purchased. The subname 
indicates that our JDBC™ calls should go through the driver to port 
1433 of the machine located at spitfire.avsafety.nps.navy.mil. Port 
1433 is running Microsoft’s BackOffice SQL Server 6.5 application. This 
server listens on port 1433 for incoming database requests, and if the 
remote user is authorized to issue commands, will process them and 
return the results via the driver that originally initiated 
communication. In this manner, the driver serves as a middleware 
solution for communicating with a DBMS server. | 

Should the process of loading the DriverManager succeed, then a 
Connection object is returned. It is from this object that we create 
Statement objects, which serve as the interface for executing SOL 
commands. By associating a Statement object with Connection, we know what 
data source we are interacting with at all times. There are different 
types of Statement objects, which we can create based on our needs. For 
example, we might use a regular Statement object to perform a one-time 
query, but should we find ourselves repeating. the query with different _ 
criteria, we might opt to use a PreparedStatement which allows us to use 
the same query syntax and only change the criteria. If we have a 
procedure that is used repeatedly and consists of a sequence of SQL 
statements, we can use a CallableStatement to create, invoke, and pass 
parameters to a stored procedure. 

The ResultSet represents a collection of rows that are the output 
of a SQL query. If no such rows exist, then the ResultSet object is 
consequently null. We use this object to navigate through the records, 
or tuples, that are returned from a query, and this object is related 
to a Statement because it is the latter object that executes a SQL 
query. 

-Java’s™ strong typing and error handling requires that our 
interacting with a database contain a number of try/catch blocks to look 
for errors. If a problem does occur, a SQLException or SQLWarning object 
are created which we can then axanene to determine what fault actually 
occurred. If necessary, we can also provide feedback to the client, or 


we can allow program execution to continue and take no action at all. 


1] 





Later in this chapter we will demonstrate what happens when the user 
enters information which is already stored in the database. 

JDBC™ also allows us to talk to a database that we know nothing about. 
We do this through the MetaData object which provides methods for 
examining a database’s schema, or design. By allowing us to dynamically » 
discover the contents of a database, we can create applications that do 
not have to change if the database does. The ACSA project did not use 
this object, and hence, if the databse is changed, the code will 


unfortunately have to be modified as well. 


D. SELECTING A SUITABLE JDBC™ DRIVER 


The Sun Microsystems web site at | 
[http://www.javasoft.com/products/jdbc/jdbc.drivers.html] offers an excellent, up-to-date 
discussion and listing of all available JDBC™ drivers. The database 


industry has categorized drivers into four categories as shown in Table 


2eZ% 


DRIVER DRIVER DESCRIPTION ALL JAVA™ 
CATEGORY 


1 JDBC" “ODBC bridge plus ODBC driver | —SNo 
Saker See 






BC™ Net pure Java™ driver 


Native-protocol pure Java™ driver 
Table 2.2. Driver Categories [Ref. 3]. 





necarding to Sun, driver categories 1 and 2 are interim database 
connection solutions where pure Java™ drivers are not yet available. 
Their deficiencies stem from the fact that they are not written 
exclusively in the Java™ programming language, which means that they 
are not strongly typed, may fail to handle exceptions, and are not 
subject to the limitations imposed by the Java™ security model.» 
Additionally, some of these drivers are not thread-safe and require 
binary code to be loaded on each client machine, which is a severe 
limitation the greater the audience size. 

Since the ACSA prototype solution was a three-tier, client/server 
application, we limited our consideration to category 3 and 4 drivers. 
After reviewing the driver overview and product descriptions provided 


by the Javasoft web site, we selected a category 3 driver from 
IDSSoftware [http://www.idssoftware.com/jdriver.htm] and a category 4 driver from 
WebLogic, Inc. [http:/;www.weblogic.com/products/jdbckonaindex.html] to work with. 
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Both drivers provided a limited number of connections and had an 
evaluation period before their licenses expired. After experimenting 
with each driver and reviewing the applicable supporting documentation, 
we opted to use WebLogic’s FastForward JDBC™ driver for three 
fundamental reasons: 


1. The WebLogic driver had much better documentation and was 
easier to install and test. Included were numerous code 
examples that illustrated how to use the driver in both Java™ 
applications and applets. 


2. The driver offered 15 simultaneous database connections, 
whereas the product from IDSSoftware only allowed ten. 
Additionally, the latter driver was almost identical in cost 
to the former, and used a proprietary server to communicate 
with data sources. Because SQL Server was installed and 
properly working on the prototype system, we wanted a driver 
that would interface with this server rather than a 
proprietary one whose reliability we knew nothing about. 


3. WebLogic provided excellent support when development issues 
arose, and when we requested for an extended license, they 
were willing to give us six additional months for testing and 
evaluation with their product. 


E. ‘WEBLOGIC’ S FASTFORWARD DRIVER 


Contact with WebLogic was either via the Internet or over the 
phone. Should future project enhancements be made and developers 
require knowledge of the driver, questions can be directed to Anil 
Bairwal [anil@mail.weblogic.com] via email or to sees technical 
representatives by calling 415-659-2600. | 

Throughout two months testing and evaluation of the prototype 
system, there was only one observed problem that may or may not be 
related to use of the driver. After a brief revision to the source code 
for the Results applet, the application raised a NullPointerException and 
indicated that the maximum number of connections the driver could 
handle were in use. Knowing that this was not the case, we chose to 
‘shut down and reboot the server, which fixed the problem. Apart from 
having to do this on one other occasion, the incident has not been 
repeated. 

For more information on the Weblogic driver, as well as the 
license agreement, see Appendix B. Driver documentation is on the 
prototype system and can be found. in the Weblogic or Connect 


subdirectories on the D drive..At the time of this writing, WebLogic 
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was in the process of being acquired by BEA Systems. BEA has pledged to 


fully support and maintain all WebLogic products, and can be reached at: 


[http://www.beasys.com/weblogic/ ]. 


F. APPLETS AND JDBC™ 


The ACSA project uses JDBC™ in Java™ applets for communicating 
with databases on a remote server. The source code fragment in Figure 


2.2 illustrates how both applets open and then close a connection to 


‘the Survey2_DB database: 


1: import java.sql.*; 
<code omitted> 
2: java.sql.Connection con; 
3: java.sql. Statement stmt; 
4: java.lang.String url = "jdbc:ff- microsoft://spitfire.avsafety.nps.navy.mil:1433/Survey2_DB"; 
<code omitted> : , 
5: public void makeConnection() { 
6: try { | 
7: Class.forName("connect.microsoft.MicrosoftDriver").newInstanceQ); 
8: con = DriverManager.getConnection(url, "sa", ""); | 
9: stmt = con.createStatement(); | 
10: 
11: - catch (Exception e) { 
textDisplayArea.appendText(e.toString()); 
13: } 
14: }//end makeConnection() 
<code omitted> 
15: public void closeConnectionQ { 
try{ 
con.close(Q); 
stmt.closeQ; 


} 
catch ( java.sq!l. SQLException e ){ 
textDisplayArea.appendText( e.toString() ); 





23: }//end closeConnection 
_ Figure 2.2. Making a connection to the Survey2_DB. 

Some explanation of what this code ‘does is necessary, so we will 
briefly highlight what is occuring here. You will notice that the 
source code that is not relevant to this discussion has been purposely 
omitted. For a complete copy of applet code, the reader should refer to 
Appendix C for the Results applet and Appendix D for the Survey applet. 

In line 1,. the import java.sql.* statement allows us to use the 
classes and interfaces that are defined in the JDBC™ API. Lines 2 and 3 


declare a Connection and Statement object respectively, and line 4 
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initializes the string literal url to the location where the Survey2_DB 
is located. | 

The method makeConnection that follows is available for the applet 
to call any time it wants to make a connection to the Survey2_DB. It is 
on line 7 where this method signals the browser’s ClassLoader that the 
applet will need some additional files. By indicating the directory 
hierarchy and the class name that is required, the browser can go back 
to the web server the applet was downloaded from and retrieve those 
files. In this case, we need the WebLogic driver that communicates with 
the SQL Server, which is in a file appropriately named MicrosoftDriver. 
This file is located two subdirectories below the directory that 
contains the applet source code. 
| The newlnstance method creates a new instance of this 
MicrosoftDriver class object that we can use. During this process, it 
is registered with the DriverManager. While this occurs, the applet’s 
main thread of execution is paused so that downloading can complete and 
subsequent calls that might need the driver will not raise exceptions. 
If there are no problems loading the necessary files, execution 
continues with line 8, where we make a call to the overloaded 
DriverManager function getConnection. The DriverManager constructs a 
Connection object and returns a reference to it, which we’ then assign to 
the variable con. | 

By keeping a reference to this object, we can then use it to 
create Statement objects, as is done in line 9. Through the association 
of the two objects, any Statement that is executed knows to which 
connection it belongs and will only affect that data source. If a query 
needs to occur on multiple data sources, separate Connection and Statement 
objects must be created and maintained. 

The getConnection function we use requires a username and password, 
so we pass the string sa (System Administrator) as the client’s 
identify, and a null password. This information is used by SQL Server 
to authenticate the client that is trying to use the Survey2_DB. SQL 
Server allows you the ability to restrict access to databases on your 
machine by using Windows NT user accounts, but the default permission 
is to allow everyone access. Because the prototype system does not have 
the Guest account enabled, only users who have properly responded to 


Windows NT’s challenge/response authentication mechanism will be 
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allowed to use these applets. Additional discussion on this subject is 
included in Chapter V. For now, you should be aware that we can change 
these user names and passwords as we desire, and only a single line of 
code will have to be modified. | 

Once a connection to the database is established, it is kept open 
until it is no longer needed. At that time the program calls the method 
closeConnection, which simply frees the resources held by the Connection 
and Statement objects. The next section illustrates the use of JDBC™ to 


check a client’s survey number and determine its validity. 
G. CHECKING SURVEY NUMBERS 


Although the ACSA program is highly automated, some 
administration will be required at the local level. Because we wanted 
to protect the integrity of the data, it is not enough that users 
simply enter a username and password to access the web site. If this 
were the case, then it is possible and very likely that one user could 
enter multiple surveys, which would skew the data and adversely affect 
any analysis. So, before a squadron member can blindly submit a survey, 
we decided to to levy a requirement that the individual be issued a 
survey number. | 

The local survey administrator, the Aviation Safety Officer (ASO) 
or other designated representative, will have to receive these numbers 
from the ASCA site administrator before the site can be accessed and 


used. These numbers are found in the Num_List_DB database, which was 


constructed as follows: 


Unit_ID Database primary key; text representing the individual squadron, e.g. “HM10”, 
“VF101” 


Start_Number | Lower limit of authorized survey numbers for this particular squadron’. 
End_Number Upper bound on authorized survey numbers for this particular squadron. 


Table 2.3. The Num_List_DB schema. 





The method of operation is very much the same if you are using 
the HTML or applet interface. At the time that the client is ready to ' 
submit his data, he is queried for a squadron and survey number. After 
entering the information, the client’s information is either accepted 
as valid and he is redirected to the page ThankYou.html, or the squadron 


or survey number are invalid and the user is redirected to the page 


NumberError.html which notifies him of the problem. 
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The code that validates the survey number is handled by the 


method checkSurveyNumber. This function uses JDBC™ to connect to the 


Num_List_DB database in the same fashion that connection was made to the 


Survey2_DB database described earlier. The connection initiating source 


code is for checkSurveyNumber is located on lines 15, 21 and 22 of 


Figure 2.3. A valid survey number can include the Start_Number, 


End_Number, or any number between them. 


ee OYE eae eS ee 


//Function: checkSurveyNumber() 

// Parameters: unit - the unit submitting the survey 

// squad - the unit's squadron number 

H surv - the unit's survey number 

//Return Type: boolean - true if the survey number is valid for the given unit and squadron, false 

Hf otherwise 

//Purpose: Confirms if the survey number is valid or not. If it is valid, then the client can submit 
the survey, otherwise, the client is informed that the survey number is invalid. 


| | nnnnnnanccwnncannnnncen ec eweeenmemn nn ennenne mens een nee ee sno nn eee nnenenaneeemennensneneneecenece nn nnmenenneeenenecssonn 


: private boolean checkSurveyNumber(java.lang.String unit, 
: java.lang.String squad, java.lang.String surv){ : 
: java.lang.String communities[] = {"HC", "HCS",; "HM", "HMH", "HMT", "HS", "HSC", "HSL", 


"VAQ", "VAW", "VF", "VFA", "VMAQ", "VMFA", 
"VP", "VQ", "VR", "VRC", VS. "VT", "VX", "Other"}; 


: java.lang.String url = "jdbc:ff-microsoft: eee avsafety.nps.navy.mil:1433/Num_List_DB”; 
: int start = -1, stop =-1; 
: boolean valid = false; 


if (communityChoice.getSelectedIndexQ != -1){ 
unit = new String(communities[communityChoice. getSelectedindex()] + squad); 


Class.forName("connect.microsoft. MicrosoftDriver"). newInstance(); 
java. sql.Connection con = DriverManager.getConnection(url, "sa", ""); 
java.sql.PreparedStatement stmt = con.prepareStatement("SELECT * FROM Num __ List 
WHERE Unit_ID = 9"); 
stmt.setString(1, unit); 
java.sql.ResultSet rs = stmt. exreueQueny: 
if (rs != null){ 
while (rs.nextQ){ 

rs.getString(1); 

start = rs.getInt(2); 

stop = rs.getInt(3); 


} 

if ((Integer.parseInt(surv) >= start) && (Integer.parseInt(surv) <=stop)){ 
valid = true; 
responseText.appendText("Your survey number is valid... Please wait.. \n"); 


else responseText. apPenaTeR non entered an INVALID number!!!\n"); 
stmt.close(); 
con.close(); 


catch (Exception e) { 
responseText.appendText(e.toString() + "\n"); 
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45: return valid; , : 
46: }//end checkSurveyNumber() | 
: Figure 2.3. Validating the client’s survey number. 


So what is occuring here? If you look at lines 16 and 17, you see 
that we initialize the variables start, and stop to -1 and valid to false. 
Line 19 looks at a Listbox component on the Survey applet to determine if 
the user has selected a community. If so, the value he selected is 
concatenated with his squadron number and put into the String object 
unit. With that done, we are ready to connect to the database. 

Lines 21 and 22 open a connection to the Num_List_DB database in 
the same way a connection was established to the Survey2_DB. We used a 
PreparedStatement object to form the query we are going to perform 
because we know that each time we perform this query, the only thing 
that changes is the value for unit. Using a PreparedStatement improves 
program performance because these queries do not have to be recompiled 
every time they are submitted to the database. The benefit from this | 
feature however is limited in checkSurveyNumber because the SQL 
statement is executed only once and a connection to the database is not 
maintained. | | 

In line 25, the stmt.setString(1, unit) looks for the first “?” of our 
PrepardeStatement object stmt, and it replaces that symbol with the value 
held by the string unit. With that substitution made, the SQL statement 
is complete and ready to be passed to the database. In this case, our 
SQL query | | 
SELECT * FROM Num_List WHERE Unit_ID = unit 
selects all entries from the table Num_List in the database Num_List_DB 
where Unit_ID equals the value of unit. The results from this query are 
then executed and go into the ResultSet object rs on line 26. rs is 
assigned the tuples of any returned records and this object can then be 
used to navigate the returned information. 

It is important to know that JDBC™ uses a forward-only cursor to 
reference the current tuple in a ResultSet object. This Susser is 
initially positioned before the first row of any returned records, and 
once we move ahead, there is no way we can look at a previous record | 
unless we perform the original query again. Because the cursor is 


positioned prior to the first record, you must make a call to the 
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ResultSet’s next method, which moves the cursor to the first record if one 
exists. Subsequent calls to this method continue to advance the cursor. 

Knowing how to navigate allows you to move from one record to 
another, but in order to retrieve information from the database, you 
nesd to use a getXXX method (where XXX is replaced by the data type of 
the field you are interested in examining). 

If our ResultSet does indeed have a record to look at (our query is 
guaranteed to return either one record or none because multiple units 
‘cannot exist in our database), we are then positioned at the first 
record by line 28. Line 29 uses the getString(/1) method to indicate that 


the ResultSet should return a string containing the value of the first 
field. Because we do not assign this value to any variable, it is 
effectively discarded and does not serve any purpose. 

Lines 30 and 31 use similar method calls to determine what the 
legitimate start and sfop numbers are for the client’s unit. If the unit 
was found, then we do some comparison in lines 34 through 37 to see if 
the client entered valid information. If he did, then processing 
continues, otherwise he is alerted that his number is not valid. 

At the conclusion of this process, the resources the applet uses are 
free and the connection is severed so that other users may submit 
information. By only opening the connection when you need it, and 
closing it shortly thereafter, you can avoid possible problems posed by 
the license limitations of the driver. | 

All possible conditions and their outcome are covered by this 


application and enumerated in Table 2.4 below: 


[SQUADRON Os. ~—SSC~C~—C—~<‘ SSS COME 


Table 2.4. Extending the possibilities of client input. 












H. | MAKING DATABASE ENTRIES 


The function makeDatabaseEntry (see Figure 2.4) is used for 
inserting data into the Survey2_DB database. Since a database UPDATE 
operation changes the contents of the database, we need some way of 


ensuring that all of the information the client submits is entered. 
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This is a concern because any number of undesirable events can occur, 


e.g. power loss, loss of connection, etc.., which can preclude this from 
happening. In order to solve this problem, we use what is known as a 
“transaction”. JDBC™ ensures database changes are made correctly with a 
“transaction”. A transaction consists of a sequence of SOL calls that 
constitute an atomic unit of work. Transactions provide ACID 
properties: atomicity, consistency, integrity of data, and durability 
of database changes [Ref. 2]. 

By default, JDBC™ treats every sequential line of code as a 
transaction. In order to group multiple lines of code into one 
transaction we must disable this setting. In line 39, we call the 
Connection object’s setAutoCommit method and pass it the value false to 
indicate that data should not be committed until we have everything we 


need. 

This step disables the auto-commit mode and treats all the 
statements between lines 39 and 63 as one atomic statement. All JDBC™ 
calls are then either committed to the database, or the transaction is 
rolled back, or aborted, and data is restored to its original value. 


//Function: §makeDatabaseEntry() 
//Parameters: squadN - the unit's squadron number 
// surveyN - the client’s suIveY. number 
/fReturn Type: None 
/fPurpose: The client's data has already been checked, and the survey number has been 
// been validated prior to this function being called. Once this procedure is 
// completed, the client's data has been inserted into the SQL 6.5 database. 
// Entries are made in both the biographical and questions table, and if either 
. insertion operation fails, then the transaction is rolled back (. e. it is 
el removed from the database). 


private void makeDatabaseEntry(java.lang.String squadN, java.lang.String surveyN){ 


java.lang.String url = "jdbc:ff-microsoft://spitfire.avsafety nps.navy.mil:1433/Survey2_DB"; 
java.lang.String designator[] = {"Pilot", "NFO", "Other"}; 
java.lang.String communities[] = {"HC", "HCS", "HM", "HMH", "HMT", "HS", "HSC", "HSL", 
"VAQ", "VAW", "VE", "VFA", "VMAQ", "VMFA", . 
"VP", "VQ", "VR", "VRC",."VS", Vs "VX", "Other"}; 
java.lang.String service[] = {"USN", "USMC", "Other"}; 
java.lang.String DH, ST, LOC; 
//independently determine which checkboxes are selected 
if (DepartmentHead.getSelectedCheckbox() == yesRadioButton) 
DH = new String("Yes"); 
else DH = new String("No"); 
if (status.getSelectedCheckbox() == regularRadioButton) 
ST = new String("Regular"); 
else if (status.getSelectedCheckbox() == activeRadioButton) 
ST = new String("Active Reserve"); 
else ST = new String("Drilling Reserve"); 
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29. if (location.getSelectedCheckbox() == eastButton) 


30. LOC = new String("East Coast"); 
31. else if (location.getSelectedCheckbox() == westButton) 
32. LOC = new String("West Coast"); 
33. else LOC = new String("Other"); 
34, java.sql.Connection con = null; 
35. : 3 
36. Class.forName("connect.microsoft.MicrosoftDriver").newInstance(); 
37. Driver driver2 = new connect.microsoft.MicrosoftDriverQ); 
38. con = DriverManager.getConnection(url, "sa", ""); 
39. con.setAutoCommit(false); 
40.. java. sql.Statement stmt] = con.createStatement(); 
41. java.sql.Statement stmt2 = con.createStatement(); 
42: stmt] .executeUpdate("INSERT INTO Biographical Data VALUES("" + 
43: communities[communityChoice.getSelectedIndexQ)] + '"," + 
44: Integer.parseInt(squadN) + "," + | 
45: Integer.parseInt(surveyN) +"," + 
46: rankChoice.getSelectedIndex() + ",'" + 
47: designator[designationChoice.getSelectedIndex()] +'",” + 
48: Integer.parseInt(flightHoursText.getText()) + "," + 
49: Integer.parseInt(typeHoursText.getTextQ)) + ",'" + 
50: | DH + oe + 
51: . ST -- mae = 
52: service[serviceChoice.getSelectedIndexQ] + ','"" + 
53: LOC + '")"); 
54: java.lang.String operation = "INSERT INTO Questions VALUES(" 1 
55: communities[communityChoice.getSelectedIndex()] + ",” + 
56: Integer.parseInt(squadN)+","+ 
‘| 57: Integer.parseInt(surveyN) +","; 
| 58: for (int ix=0; ix<NUM_QUESTIONS-]; ix++)- 
59: operation += (choices[ix].getSelectedIndex(Q) + ","); 
60: operation += choices[NUM_QUESTIONS-1].getSelectedIndex() + ")"; 
61: stmt2.executeUpdate(operation); | 
62: con.commit(); 
63: con. setAutoCommit(true); 
64: stmtI.closeQ); 
65: stmt2.close(); 
66: con.close(); 
67: responseText.appendText("Survey successfully submitted. Thank you for your input.\n"); 
68: miNew_ActionPerformed(null); 
69: } 
70: catch (Exception e){ 
71: responseText.appendText("Survey not submitted! Processing error encountered:\n"); 
12: responseText.appendText(e.toString() + "\n"); 
73: try { 
74: if (con != null) 
1D: con.rollbackQ); 
76: } 
77: catch (SQLException ex){ 
78: responseText.appendText("Survey not submitted! Processing error. encountered:\n"); 
79: responseText.appendText(ex.toString() + "\n"); 
80: 
81: 


} 
82: }//end makeDatabaseEntryQ) 


Figure 2.4. The function makeDatabaseEntry. 
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The Survey2_DB database contains the two tables Biographical_Data 
and Questions linked with a composite key of consisting of three fields: 
Community, Squadron_Number and Survey_Number. By the time the function 
makeDatabaseEntry is called, the client’s data has already been checked 
for correctness and the survey number has been validated. — 

This method receives as parameters the client’s unit and survey 
number. Lines 35 through 41 operate as before, where we load the 
database driver and wait for the files to be downloaded to the client’s 
“browser. Once this is done, we are ready to take the biographical 
information from the applet and prepare it for insertion into the 


database. This is done by the 12 lines from 42 to 53. A separate 


Statement object from the one we will use to input the question 
responses is used because none of the code is actually being executed. 
Rather, it is simply being queued for execution and will occur all at 
once because it is part of a transaction. If we used the same Statement 
object but changed its value, we would wind up attempting to only 
insert the responses to the 61 questions. | : 

Lines 42 through 52 use Java™ GUI object methods to retrieve the 
selections the client has made. Because these GUI components are drop- 
down or Choice containers, we know what their values will be based on 
the index number that is selected. For this reason, we can 
appropriately create arrays that contain the values of the survey, and 
then index into these arrays to grab ‘the values the client has 
selected. 

After processing of the biographical information is complete, we 
move on to lines 54 through 60 which append to the string operation the 
numeric values of the questions. When we reach line 62, we execute both 
Statement objects and commit the data to the SQL 6.5 database. If a 
problem is encountered, exception handling moves the point of execution 
to line 71 where three things are done: the client is informed that a 
problem was encountered, information as to what occurred is detailed, 
and if a connection is still active, the data is rolled back to its 
prior state. This means that if the record did not exist before we 


attempted to insert it, it will not exist afterwards. 
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Ls THE RESULTS APPLET 


Clients have the ability to graphically view database results 
through the Results applet shown in Figure 2.5. In this section, we will 
review using this applet and the role of JDBC™ in accessing data from 


the database. 


Select a 


Select a Service 





Figure 2.5. The Results applet. 

This program displays results for individual survey questions 
based upon a client-selected matrix of community, service and location 
options. Selecting one of the 61 survey questions forms the root of | 
every SQL query statement passed to the database. All database queries 
must be formed using this question as the selection basis, with results 
being displayed one question at a time. For example, in Figure 2.5, a 
client selected question 1 as the root of their query. 

An overview of the SQL creation process is presented in 
Figure 2.6. Every query begins with a root which is initialized in the 
method processQuery. Depending on the client’s selections, one of eight 
functions is then called to complete constructing the specific SQL 


statement according to the criteria the client wishes to examine. 
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Finally, the function countResponses is called to execute the query and 


tabulate the results that need to be returned. 


Main thread of execution 


Forms root of SQL query 


Calls one of eight functions from: 


querySquadronCommunityServiceLocation 
queryServiceLocation 
querySquadronCommunityLocation 
querySquadronCommunity Service 
queryService Complete the SQL query — 


queryLocation 
queryQuestion 


Executes and tallies the query results 


Data visually presented to client 





Figure 2.6. Building a query. 


Queries are initiated by the function processQuery. The source code 
for processQuery is displayed in Pica 2.7. The root of every query 
begins on line 12 where we initialize the string object query to the 
string literal "SELECT Q". The function then looks at each drop-down 
box, determining according to the client's selections which call it 
next needs to make. The decision of which call to make next is made by 
the series of if and elseif clauses shown from lines 14 through 45. | 

An hypothetical example will best serve as a good illustrative 
guide as to what occurs on these lines. Let's suppose we have a client 
who is interested in viewing the results of question one for all U.S. 


Naval aviation commands that are located on the East Coast. He makes 


his selections accordingly: | 


GUI component Set to 
Question 1 Query question number T 


Select a Community Default value’ Query should include responses from all 
{ communities. 


Select a Service USN Responses should be tallied only if the 
| service of the individual submitting the 
survey is USN. | 


West Coast Squadron should be on the West Coast. 


Table 2.5. Hypothetical selection box entries. 
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Using this example, we start evaluating the client's selections 
on line 14. The method getSelectedIndex belongs to a Java™ Choice object 
and returns the index number of the client's selection (no selection 
returns a value of -1). Because our default selections are strings of 
text instructing the user what to do, a value of 0 is returned if the 
client does not explicitly choose a query criteria. In the example 
above, the only time we will get a 0 is when we use the getSelectedIndex 
method of the GUI component that prompts the user for a community. This 
component, which we call the squadronCommunityBox, causes the if 
condition starting on line 14 to fail, and execution continues on line 
20 where all the components we check have client selections. Thus, we 
pass the parameter query to the method queryServiceLocation, which will 
append the proper SQL syntax to the end of the string literal. 


1: //Function: processQuery() 
2: //Parameters: None 
3: /fReturn Type: None 
4: Determines the specific query to be passed to the database 
2; from the user's selections of: question number, community, 
6: service and or location. Each query selection calls 
7 the appropriate query function, e.g. queryService(query). 
8: // Calls clearDisplay( to clear the display in the event of 
9: multiple user queries. | 
10: /[-nnnnen nnn nnnn nnn nnn nnn nn anew new n nnn en nnn ene neem wenn nen een nnn ncenennnnen enn annaneeenn anna ann nnnnnnnnnennn nnn nnnemenummmme 
11: public void processQuery() { 
12: java.lang.String query = "SELECT Q" ; 

clearDisplayQ); 


if( ((serviceChoiceBox.getSelectedIndex() !=0) && (serviceChoiceBox.getSelectedIndex() != -1)) 
&& ((squadronCommunityBox.getSelectedindex() !=0) && 
(squadronCommunityBox.getSelectedIndex() != -1)) 
&& ((squadronLocationBox.getSelectedIndex() !=0) && 
(squadronLocationBox.getSelectedIndex() != -1)) ) 
querySquadronCommunityServiceLocation(query); 


else if ( ((serviceChoiceBox.getSelectedIndex() !=0) && (serviceChoiceBox.getSelectedIndex() 
I= -1)) 
&& ((squadronLocationBox.getSelectedIndex() !=0) && 
(squadronLocationBox.getSelectedIndexQ !=-1)) ) 
queryServiceLocation(query); 


else if ( ((squadronCommunityBox.getSelectedIndex() !=0) && 
(squadronCommunityBox.getSelectedIndex() !=-1)) 
&& ((squadronLocationBox.getSelectedIndex() !=0) && 
(squadronLocationBox.getSelectedIndex() != -1)) ) 
querySquadronCommunityLocation(query); 


else if ( ((serviceChoiceBox. getSelectedindex() '=0) && (serviceChoiceBox. getSelectedIndex() 


I= -1)) 
&& ((squadronCommunityBox. eetSelectedindex() =0) && 
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(squadronCommunityBox.getSelectedIndex() != -1)) ) 
querySquadronCommunityService( query ); 


else if ( (serviceChoiceBox.getSelectedIndex() !=0) && 
(serviceChoiceBox.getSelectedIndex() != -1) ) 


-  queryService(query); 


else if ( (squadronCommunityBox.getSelectedIndex() =0) && 


(squadronCommunityBox.getSelectedIndexQ != -1)) _ 
querySquadronCommunity(query); 


else if ( (squadronLocationBox.getSelectedIndexQ) !=0) && 
(squadronLocationBox.getSelectedIndex() != -1) ) 
queryLocation(query); 
else 
: queryQuestion(query); 
46: }//end Ee 
Figure 2.7. The function processQuery. 





QueryServiceLocation builds the specific SQL statement from the 
client's question, service, and location selections. In lines 14 
through 19 of Figure 2.7, we begin the concatenation process by adding 
the required query composite key fields. Next, we add on the value for 
the client’s service and location selections. This completes the SQL 
query statement, and it.is sent to countResponses for futher processing. 


1: //Function: queryServiceLocation() 
2: //Parameters: java.lang.String query, the root query passed from seeneGien 
3: //Return Type: None 
4 Receives the initial query from processQuery()and 
>: concatenates the remaining SQL syntax to the string literal. 
6: This specific query calculates the question number, 
7 service, location tuple. Calls countResponses() 
8 to calculate the number of tuples for this query. 
nn 
10: public void queryServiceLocation( java.lang.String query ){ 
textDisplayArea.append("\nQuery -> queryServiceLocation ") ; 
textDisplay Area.append("\nService ->" + service[serviceChoiceBox.getSelectedIndex() -1] ) ; 
textDisplayArea.append("\nLocation ->" + location[squadronLocationBox.getSelectedIndex(Q) -1] ) ; 
query += questionBox. getSelectedIndex() +" FROM Biographical_Data INNER JOIN rrapesnons: + 
"ON Questions.Community = Biographical_ Data.;Ccommunity AND " + 
"Questions.Squadron_Number = Biographical_ Data.Squadron_Number AND " 
"Questions.Survey_Number = Biographical_ Data.Survey Number WHERE "+ 
"Biographical Data.Service = ' + service[serviceChoiceBox.getSelectedIndex() -1] +" "+ 
ae Biographical Data.Location =" + POC on OR equation oceHOnles: getSelectedIndexQ) ah 
textDisplayArea. append(""") | ; 
textDisplayArea.append("\nquery - >" + query ); 
textDisplayArea.append("") ; 
: countResponses( query ); 
25: }//end queryServiceLocation() 
Figure 2.8. The function queryServiceLocation. 
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The function countResponses processes the SELECT query statement 
by calling the method executeQuery. Any data that matches the criteria 
the user seeks is eevaened to the ResultSet object rs. We then step 
through each record in lines 19 through 30 and tabulate results based 
on a range of responses. Once this is done, the method displayData (see 
Figure 2.10) is called to create a histogram much like the one shown 


earlier in this section. 


: //Function: countResponses() 
: /fParameters: java.lang.String query, the concatenated SQL query to be passed to the ASCA database. 
: //Return Type: None 

//Purpose: Receives and executes the specific database query. Counts 

each individual result tuple recording the number of 

/I records in each category. Counts the total number 

/ of records received in numTotal. 

|| Re eI Re ne SMe ee a AP oe a A A ET ee eee 


we Sa oe Se 


: public void countResponses( java.lang.String query ){ 


10: try{ 
11: ResultSet rs = stmt.executeQuery( query ); 


12: = //initialize variables for multiple queries 
13: numTotal =0; 

14: numDisagree =0; 

15: numNeutral =0; 

16: numAgree =0; 

17: numNotApplicable =0; 

18: | rowCount =0; 


19: while (rs.next()) { 
20: int x = rs.getInt(1); 
21: if ((x >= 0) && (x <=2)) 


22: numDisagreet++; 

23% else if (x == 3) 

24: numNeutral++; 

25: else if (x > 3 ) 

26: numAgree++; 

27: else if (x == -1) 

28: numNotApplicable++; 
29: rowCount++; 


30: = }//end while 


31: numTotal = (numDisagree + numNeutral + numAgree + numNotApplicable); 
32: __ rs.close(); 


34: catch (Exception e) { 
35: textDisplayArea.appendText(e.toString()); 


} 
37: }//countResponses() 
Figure 2.9. The function countResponses. 
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//Function: displayDataQ) — 
//Parameters: None 
/fReturn Type: None 
//Purpose: Checks the total number of records for this display, 
: num Total, against the minimum number of records required 
Hf to display query data, MIN SURVEY NUM. This feature protects 
// _ individual anonymity at the | beginning ‘of the survey 
Hf process. If the query returns more than MIN SURVEY _ NUM 
// records then this function sets visible each display object. 


ee | ee ere enc once nents aes ecto nLieer ne esata ena rv nena ne ERE aoe 


11: public void displayDataQ{ | 


ee ee ee tee 
= 


12: //check that the required number of records exist to display data 
13: if (MumTotal < MIN SURVEY NUM) { 

14: clearDisplayQ; 

15: //required number did not exist, display no results alert 

16: noResultsLabel.setVisible(true); | 

17: processingQueryLabel.setVisible(false); 


18: retum; 

19: 3 

20: = //required number of records exists, displaying results 

21: else £ 

22: clearDisplayQ; 

23: try { 

24: //displays the corresponding survey question 

25: _ questionDisplayLabel.setText("Question " + questions|questionBox.getSelectedIndex()-1]); 
26: aueshonipey paver setVisible(true); 

27: //display the number of surveys used to calculate the display column data 

28: numSurveysLabel.setText("Number of surveys: " + rowCount); 

29: } catch(java.beans.Property VetoException e) {} | 

30: processingQueryLabel.setVisible(false); 

31: numSurveysLabel.setVisible(true); 

32: noResultsLabel.setVisible(false); 

33: disagreeColumn.setVisible(true); 

34: disagreeColumn.setBounds(100,Y_coordDisagree, COLUMN WIDTH, (int)disagreePixelHeight); 
33: neutralColumn.setVisible(true); 

36: neutralColumn.setBounds(170,Y_coordNeutral, COLUMN WIDT H(int)neutralPixelHeight); 
37: agreeColumn.setVisible(true); 


38: agreeColumn.setBounds(230,Y_coordAgree, COLUMN _ WIDTH, (int)agreePixelHeight); 

39: notAppColumn.setVisible(true); | 
40: notAppColumn.setBounds(295,Y_coordN otApp, COLUMN WIDTH, (int)notAppPixelHeight); 
4l: setPercentLabel Visible(); 


} 
43: }//end displayDataQ) 
Figure 2.10. The function displayData. 


J. CONCLUDING REMARKS 


JDBC™ is Java™'s ODBC solution. While JDBC™ is an easy object 


model to learn and use, you need to remember that it is only available 
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to Java™ applications and applets. If you are creating a program in 
another language, you will need to find an alternative means of 
interacting with data sources (such as ADO, which is discussed in 
Chapter IV). 

Both ACSA applets use JDBC™ to talk to the remote databases we 
developed for this project. If the back-end database is ever changed, 
it will be necessary to alter the manner in which these applets parse 
information into retrieve information from the database. While nothing 
can be done to preclude this foreseeable event, the ability to 
manipulate survey questions, client choices, and presentation styles 
could be done if the design of the applets were rebuilt as reusable 
JavaBean components. Because the initial development of the prototype 
system had to be completed fairly quickly, this was not done, but the 
process of extending the code to allow greater system flexibility 


should not be difficult to do. 
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III. JAVA™ SERVLETS 


A. THE COMMON GATEWAY INTERFACE (CGI) 


During the early, formative years of the World Wide Web (WWW) 
(circa 1990), the Common Gateway Interface (CGI) specification was 
developed. Prior to the CGI concept, web pages were static displays of 
information (primarily text and graphics) that were conveyed to clients 
through the use of the Hypertext Markup Language (HTML). There was 
relatively little interaction between a client and server, and the 
connection between the two was severed as soon as the server was done 
processing the client’s request. With CGI, however, clients could now 
do other things ~ such as run programs on remote web servers. These 
programs could be initiated either directly, by referencing the name of 
the program in a Uniform Resource Locator (URL), or more commonly, 
through the use of an HTML object known as a form. Via these means, a 
CGI program could parse form input into a database, generate new HTML 
pages “on-the-fly” and return them to the client, or perform some other 
action altogether. The ability to produce dynamic content exponentially 
increased the amount of client-server interaction, made the web a more 
appealing and useful information medium, and ensured that CGI would | 
come into widespread acceptance. ; 

As CGI was used more frequently, developers began to take note of 
its vulnerabilities. Chief among a long list of concerns was security. 
CGI scripts and programs were only aS good as the programmer that 
developed them. Even experts at times unknowingly released flawed CGI 
programs (such as phf, a CGI program that shipped with the distribution 
of the National Center for Supercomputing Application's (NCSA) web 
server and allowed hackers to gain remote access to files). The exploit 
of such programs has served to make web administrators more security 
conscious, but it has not drastically reduced the use of CGI. 

The other notable problem with CGI was the manner in which client 
requests were processed. When the web server received a request to run 
a CGI program, the server would generate a list of environmental 
variables which were then passed to the CGI program once it was loaded 
into memory. Regardless of whether the program accessed these variables 
or not, the environment’s state had to be sent to the program. If there 
were whultiple, simultaneous requests for the same CGI program, each 


request had to be satisfied individually, i.e.,.the server had to 
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generate and pass n sets of environmental variables for n requests, and 
the program was loaded and executed in its own memory space n times. 
Hence, n requests resulted in n separate threads of execution. This 
behavior was considered acceptable when a CGI program was requested 
once per minute. However, sites that were viewed millions of times and 
made extensive use of CGI programs sometimes found that the large 
volume of client requests either crashed the server or brought it to 
its knees. | 

These problems eventually had fixes. A program called CGIWrapper 
reduced the risk of CGI exploits, and an alternative CGI model (called 
Fast CGI) was developed that lessened server overhead and improved 
system performance. As with anything else, however, the progression of 
time gave rise to new, considerably safer technologies that could 
accomplish the same tasks in far less time. The new buzzwords became 
Active -X, Active Server Pages (ASP), Java™ applets, JavaBeans, etc. 
Stiit, CGI somehow became entrenched in web site development, and it 
never did die. For this reason, and to present via example how CGI | 


works, we continue with a brief CGI demonstration. 


B. A CGI DEMONSTRATION 
A diagram perhaps best illustrates the client/server connection. 
The simplistic example we present at this juncture is representative of 


what happens when a client uses a browser to request a web page: 
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Figure 3.1. The Client/Server Connection [Ref. 4]. 


The seven-step process of serving a file is identical no matter 
what Multipurpose Internet Mail Extension (MIME) format is being 
served. An important distinction to make here, however, is that in the 
case of serving an HTML file, the web server automatically generates 
and sends the correct response headers for you. This is not the case 
with a CGI program, which must take care to explicitly do this. For 
example, if the programmer fails to return a correct response header, 
then the client is generally informed that the server encountered an 
internal error while it tried to process the CGI program. 

Once the correct headers are sent, the process of generating HTML 
can begin. CGI programs can be written in any number of programming or 
scripting languages. Typically, developers use C or the Practical 
Extraction and Reporting Language (PERL). The short PERL script that 
follows was placed in the cgi-bin directory of our default web site 
running Microsoft’s Internet Information Server (IIS 4.0). It is worth 
noting that IIS does not come with a PERL interpreter, and there are 
additional steps that need to be taken should you desire to support 
PERL scripts under IIS: | 


1. Download PERL from Hip Communications, Inc. [http://info.hip.com], and 
install it into its own directory independent of all web 
directories. Under no circumstances should the PERL executable 
(perl.exe) or its libraries be placed directly under the HTTPd 
software, specifically, under the cgi-bin directory [Ref. 5}. 
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This placement exposes the executable to the outside world and, 
quite literally, any other machine on the Internet can point a 
script to your /cgi-bin/, overload your machine, and considerably 
reduce your available bandwidth [Ref. 5]. 


2. By using the Microsoft Management Console or the HTML 
Administrative interface to IIS, you can select the cgi-bin 
directory (or whatever location you choose to place your scripts 
in) from the default web site and modify its application | 
mappings. Specifically, you should add the .pl or .cgi extension 
and map it to the PERL executable as demonstrated in the 
following IIS Management Console caption: 


figuration 


C:\WINNT\System32\inetstv\asp. dil 
C:\AWINNT\System32\inetsrv\asp. dil 
C:\AWINNT\System32\inetsrv\asp. dil 
CAWINNT \System32\inetsrv\asp. dll 
C:\WINNT\System32\inetsrv ‘ism. dil 
C:AWINNT\System32\webhits. dil 
C:AWINNT\System32\ida. dll 
C:\WINNT\System32\inetsrv\httpodbe. dil 
C:\AWINNT \System32\ida. dil 
C:\perl\perl.exe %s %s 
C:AWINNT\System32\inetsrv\ssinc. dil 

C: SWINNT\Sustem32\inetstw\ssinc, St ns 





Figure 3.2. IIS Management Console (MMC) - using MMC to map the .pl 
extension to the PERL executable. 

With the mapping complete (so that the web server now knows where 
the interpreter resides), and some PERL code written and in place, you 
can begin testing your script. You need to ensure that the mapping to 
the PERL executable has “%s %s” appended to it (The “%s %s” is case 
sensitive, so “%$S @S” will not work [Ref. 6]). If this mapping isn’t 
done correctly, CGI program execution will timeout under IIS after 900 
seconds, and the server will fail to return a response. 

The example PERL script we are going to use is only seven lines 
in length (see Figure 3.3). This scripts determines and telis the user 
what environmental variables the web server it is executed on supports 


(we can use this script on any web server that has and supports a PERL 
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interpreter, although configuring PERL will most likely differ from 


what has previously been described). 


print "HTTP/1.0 200 OK\n"; 
print "Content-Type: text/html\n\n"; 
$i = 0; 
while (($key, $val) = each %ENV) { 

print "i=", $I," ", "$key = $val<BR>\n"; 
6: $it+; 
7: } 
Figure 3.3. The file cgivars.pl. 


I: 
2: 
3: 
4: 
> 





The first two lines of cgivars.pl are HTTP response headers. Line 1 
is the HTTP Status header, which informs the client’s browser what HTTP 
protocol version the program will communicate with (in this case, 


version 1.0), and the status code 200 (which lets the browser know that 


the client’s request was successful and that data is forthcoming). The 


next line identifies what type of data will be transferred (here, we 
are simply sending text or HTML back to the client). The remaining part 


of the program iterates through a loop, using an associative array to 


capture the name of each environmental variable, its value, and-output 


the results back to the client. The output of this program on an IIS 
4.0 web server resulted in 38 environmental variables, with their names 


and values, being returned to the client as shown in Figure 3.4. 


I=0 SERVER_SOFTWARE = Microsoft-IIS/4.0 

i= 1 INSTANCE ID=1 

i= 2 PROCESSOR_IDENTIFIER = x86 Family 5 Model 7 Stepping 0, AuthenticAMD 
i= 3 PROCESSOR_ARCHITECTURE = x86 

1=4 OS = Windows_NT 

i=5 GATEWAY _ INTERFACE = CGI/1.1 

i= 6 INCLUDE = C:\Program Files\Mts\Include 

1= 7 REMOTE_ADDR = 127.0.0.1 

i= 8 REQUEST_METHOD = GET 

i= 9 WINDIR = C\WINNT 

i= 10 HTTP_ACCEPT = image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, 
application/vnd.ms-excel, application/msword, application/vnd.ms-powerpoint, */* 
i= 11 HTTP_ACCEPT LANGUAGE = en-us 

i= 12 HTTPS = off 

i= 13 HTTP_ACCEPT ENCODING = gzip, deflate 

i= 14 SERVER_NAME = 127.0.0.1 

i= 15 PROCESSOR_LEVEL = 5 

i= 16 OS2LIBPATH = C:\WINNTisystem32\os2\dll; 

i= 17 SERVER_PORT = 80 | | 

i= 18 PATH_TRANSLATED = C:\InetPub\wwwroot\cgi-bin\cgivars.pl 

i= 19 SYSTEMDRIVE = C: 

i= 20 SERVER_PORT_SECURE = 0 

i= 21 LOCAL_ADDR = 127.0.0.1 

i= 22 SERVER_PROTOCOL = HTTP/1.1 
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1= 23 SYSTEMROOT = C:\WINNT 

i= 24 REMOTE _HOST = 127.0.0.1_ . 

i= 25 COMSPEC = C: \WINNT\system32\cmd. exe 

i= 26 HTTP_USER_AGENT = Mozilla/4.0 (compatible; MSIE 4.01; Windows NT) 
i=27 PATH=C \WINNTisystem32; C:AWINNT; S \Program Files\Mts; C: Mee eens 
i= 28 PROCESSOR_REVISION = 0700. 

i= 29 HTTP_CONNECTION = Keep-Alive 


i= 30 NUMBER_OF_ PROCESSORS = 1 

i= 31 USERPROFILE = C:\WINNT(Profiles\jsheld 
1= 32 COMPUTERNAME = COMPUTER2 

i= 33 SCRIPT NAME = /cgi-bin/cgivars.p! 

i= 34 LIB = C:\Program Files\Mts\Lib 

i= 35 PATH_INFO = /cgi-bin/cgivars.pl 

i= 36 CONTENT LENGTH = 0 

i=37 HTTP_HOST = 127.0.0.1 


Figure 3.4. Output of the cgivars.pl. script. 





As previously discussed, since every one of these values must be 
determined for each CGI program that is executed, there is a large © 
amount of server overhead that must be performed. With this in mind, as 
well as the numerous security-related concerns associated with CGI 
programs, Javasoft introduced the concept of a servlet in April 1997. 
Servlets are essentially the server-side version of an applet: a small 
piece of Java™ code that is loaded by a web server and used to deal 
with client requests, much like CGI [Ref. Ale 


The two central differences between servlets and CGI programs 
are: 


e The servlet init method allows programmers to perform resource- 
intensive operations at startup that are common to all servlet 
invocations. For example, by having the init method make a database 
connection, the connection is made once and maintained through 
the servlet lifecycle. Each serlvet invocation (generated from a 
client request) then uses this existing connection to perform 
database operations, and thus, the amount of overhead involved in 
establishing a connection is reduced to the first occasion that 
the servlet is executed. CGI programs cannot do this, and 1,000 - 
simultaneous form submissions that have to be parsed into a 
database would result in 1,000 separate database connections © 
being generated. 


e Servlet development extends the benefit of using the Java™ 
programming language. Because Java™ is platform-independent, so 
are servlets, and they can be run on any platform without 
recompilation or rewriting. CGI programs written in high~ ~level 
languages such as C are not portable [Ref. 7]. 


Servlets are an effective substitute for CGI programs. They can 
process data that is submitted via an HTML form, allow collaboration 


between people by synchronizing requests to support systems such as 
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online conferencing, and pass requests to other servlets to load 


balance the amount of work that a system or servlet is performing. 


Cc. SUPPORTING SERVLET DEVELOPMENT 


Java™ servlets are not part of the core Java™ language. Rather, 
they are an extension to it and are defined in two packages: javax.servlet 
and javax.serviet.http. Javasoft provides a servlet Software Development Kit 
(SDK) that contains all of the pieces necessary for implementing 
servlets on web servers. Java™ Development Kits (JDK) 1.1.6 and later 
contain the servlet packages but do not have the servlet server engine 
for running and testing your servlets. By downloading the Servlet SDK, 
you get this engine (servietrunner.exe, ~41K), API documentation, and 
sample support for Netscape, Microsoft, and the Apache web servers 
[Ref. 8]. More information on the Servlet SDK and download instructions 
are at - | 

[http://www.javasoft.com/products/java-server/servlets/index.html#sdk.] 

We used Windows NT Server 4.0 running IIS to develop our Java™ 
servlets (IIS is available free of charge from Microsoft and is bundled 
with their Windows NT 4.0 Option Pack (~27 MB)). IIS requires an Intel. 
(Pentium 66 MHz or greater) or compatible system with 32 MB of memory 
(RAM) and 200 MB of available hard-disk space for proper installation. 
If you system meets or exceeds these specifications, you can download 


the option pack from: 


[http:/Awww.microsoft.com/windows/downloads/contents/Updates/NT40ptPk/default.asp] . 


After installing the software, we began developing servlets in 
two environments. First using NT’s Disk Operating System (DOS) 
emulator, we made changes to the machine’ s environmental variables 
through the Control Panel. To do this, simply start the Control Panel, 
select System, then edit the environmental variables in the following 
manner: | 


e PATH - Add the absolute path to the bin directory of the JDK that 
you are using. The PATH statement enables Windows to find the 
executables Java™, javac, javadoc, etc.. which you use when 
writing Java™ applications, from any current directory (You can 
always find out the current value of your PATH by typing “path” 
at the DOS prompt). | | 


e CLASSPATH - Installation of the JDK should create and set this 
variable. You can determine if it is currently set by typing 
“set” at the DOS prompt. This lists all of the environment 
variables (CLASSPATH will not appear if it is not set). CLASSPATH 
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tells the Java™ virtual machine and other applications (which are 
located in the JDK bin directory) where to find the class 
libraries. CLASSPATH can indicate where a directory of class 
files are located, it can point to a zipped file or Java™ Archive 
(JAR) file containing class files, or it can refer to a specific 
class file. By default, the Java™ tools temporarily append the 
following to whatever CLASSPATH you have explicitly set in your 
startup file: | 

.; [bin] \..\classes; [bin]\..\lib\classes.zip 
where [bin] is substituted by the absolute path to the JDK bin 
directory. Therefore, if you keep the bin and lib directories at 
the same directory level (that is, if they have a common parent 
directory), the executables will find the classes. You need to 
set the CLASSPATH only if you'move classes.zip or want to load a 
different library (such as one you develop). For more information 
on how we configured these settings for our project development, 
see Table 4.1. : 





PATH .7e:\jdkl.2beta3\bin;d: \VisualCafePDE\BIN;d: \VisualCafePDE\ 


JAVA\BIN 
.;e:\jdkl.2beta3\bin\classes.zip;e:\jsdk2.0\lib\jsdk.jar;d: 
\VisualCafePDE\BIN\COMPONENTS \SYMBEANS. JAR; d: \VisualCafePDE 
: \JAVA\LIB\CLASSES.ZIP;d: \VisualCafePDE\JAVA\LIB; 
Table 3.1. Project settings for PATH and CLASSPATH. 














CLASSPATH 






Making these changes allows the developer to use a text editor, 
such as notepad.exe or edit.com, to create, compile, debug, and run Java™ 
applications from the DOS prompt. This procedure. is quite primitive 
when compared to the Rapid Application Development (RAD) tools that are 
available for Java™. Therefore, we decided to explore such a tool - | 
namely, Symantec’s Visual Café product (version 2.5). This Integrated 
Development Environment (IDE) is extremely powerful, provides a great 
deal of built-in support for applications and applets, and has many 
customizable settings that allow you to support other types of software 
development. In order to use Symantec’s IDE for servlets, we had to 
modify the program's CLASSPATH (which is independent of the DOS 
CLASSPATH setting). The Café product automatically generates the 
CLASSPATH it needs to support its normal operation. By allowing the 
developer to append to that path, you can develop servlets by simply 
including the appropriate jar file - jsdkjar (see Figure 3.5). 

Jsdk.jar is part of the Servlet SDK distribution. You can view the 
contents of any jar file by typing ‘ jar -tf <jar file>” at the DOS prompt. 


The archived jsdk file contains 27 class files: 
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SERVLET CLASS FILES UTILITY CLASS OTHER CLASS 


FILES FILES 


HttpDate Ascit ServletConnection 
HttpDateUpdater Pool ServletLoader 
HttpInputStream Queue 
HttpOutputStream HttpRequest QueueFullException 
InvalidRequestException QueueEmptyException 
HttpRequestLine 
MessageString 
MessageBytes 
MimeHeaders 
MimeHeadersEnumerator 
HttpSessionImpl 
SessionContextImplHttpResponse 
HttpResponse$OldCookieExpiry 
HttpRequestListener 
MimeHeaderField 
CacheControlHeader 
HitpServer 
HackURLConnection 
; HttpServerHandler 
HitpServietConfig 





Table 3.2. Jsdkjar class files. 





Figure 3.5. Modifying Café’s CLASSPATH. 


While Symantec’s product did offer an extremely easy-to-use, 


self-explanatory interface and powerful tools for developing Java™ 
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applications and applets, it did have some noticeable drawbacks. First 
and foremost, there is a fair amount of extraneous code generated when 
using Symantec’s drag-and-drop Graphical User Interface (GUI) editor. 
This results in larger class files, and code which is not optimized for 
network performance. By manually editing the code, you can 
Significantly reduce the size of the Java™ bytecode (class file) and 
reduce the amount of download time over network connections. 
Unfortunately, the process of editing code is cumbersome and takes a 
fair amount of time and reorganization of code that Symantec 


automatically generates. Other problems include: 


e Two-way parsing between the GUI editor and underlying code does 
not work. When components are removed from the GUI designer, the 
underlying code is not completely changed, and when components 
are added in the code, they are not visible on the GUI designer. 


e Sometimes, you may lose all GUI designer functionality. If this 
occurs, you can no longer use the drag-and-drop features of the 
GUI designer. 


e When Café crashes (which occurs quite often), changes are lost 
Since the last good compile and other computer components, such 
as the monitor and sound card, may not work properly. The end 
result may require rebooting the system to regain control and/or 
functionality of all computer hardware. | 


e Applet development works natively under Microsoft’s Internet 
Explorer 4.0, however, using the applet in a Netscape browser 
requires a Java™ plug-in. There are also noticeable “appearance” 
differences (e.g. dialog boxes may have a background color in one 
browser but not the other). 


D. SURVEYSERVLET 


Since servlets are faster and safer than CGI programs, we decided 
to use them to accept, process, and input the ACSA survey information 
into a SQL 6.5 database. The HTML front-end was designed using 
Microsoft Front Page 98, and serves primarily as the interface of 
‘choice for clients who are limited in what they can do by their. 
computing resources. The HTML form also has the added benefit of 
allowing the client to avoid installation and configuration of the 
Java™ plug-in. | 

While most of the HTML is self-explanatory (you can find a 
complete copy of the HTML and the Javascript error-checking files in 
Appendices D and E), it is worth highlighting and explaining the 
meaning of at least one key HTML tag: : 
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<form action="http://spitfire.avsafety.nps.navy.mil:8080/servlet/SurveyServiet” method="post" 


name="survey" onsubmit="return check_form();"> 


The form tag is used to inform the browser that the HTML code 
that follows is part of a form. What to do with that form is specified 
by the action attribute. In this case, we inform the browser to take 


the contents of the form and send them to port 8080 of the Uniform 
‘Resource Locator (URL) spitfire.avsafety.nps.navy.mil. Unbeknownst to the 


client, a servlet server is listening on that port, and will invoke the 


SurveyServiet. | | 
The method of sending the information is via the POST method. The 
POST method transfers information via HTTP headers, and the information 
is encoded and put into a header called QUERY_STRING for further 
processing [Ref. 9]. It is worth noting that you can only post 
information to files that are executable and that can read the 
QUERY STRING; otherwise, you will receive an error [Ref. 9]. We could 
have sent the data via the GET method, however, there are some serious 


limitations to doing this that should-be noted: 


e The GET method encodes data using a scheme called URL 
encoding. In this schema, name/value pairs are joined with 
equal signs and different pairs are separated by the ampersand 
[Ref. 9]. | 


e.g. namel=valuelé&name2=value2éname3=value3 


Spaces are removed and replaced with the “+” character, and 
any other nonalphanumeric characters are replaced with a 
hexadecimal value according to RFC 1738 [Ref. 9]. The GET 
method sends the encoded user information appended to the URL 
that processes the request. The page and the encoded 
information are separated by the “?” character, as follows: | 


http://www.example.com?name1l=valuel &name2=value2&name3=value3 


With lots of information to send to the server, this can be a 
quite long, ugly string. More importantly, however, it is a 
security hazard because if the page is printed or someone 
other than the sender can view the page, then the 
confidentiality of the information is compromised. 


e The GET method has a size limitation of 1,024 characters. 


The remaining two attributes of the form are its name and the 


Javascript function to execute when the form is submitted. 


4] 





E. SERVLET ARCHITECTURE 


The javax.serviet package provides all of the interfaces and classes 
needed for writing servlets. The central abstraction in the Servlet 
Application Programming Interface (APT) is the Serviet interface, which 
is implemented either directly or by extending a class that already 


implements it [Ref. 10]. 


HitpServiet 


Figure 3.6. Servlet Architecture. 





The Servlet interface declares many methods but does not provide 
implementations for them - this task is left to the programmer, who may > 
choose to override the behavior of certain methods (e.g. how a GET or 
POST operation is handled). The inheritance of methods by your servlet 
is graphically represented by Figure 326% 

The Servlet API encapsulates the communication to and from the 
client via a request and response object. Specifically, the ServletRequest 
handles all communication from the client to the server, and the 
ServietResponse provides a means communicating from the servlet back to 
the. client. [Ref. 10] . A look at the SurveyServiet will provide a solid 
example of how servlets work, what events occur, and when these events 


are executed. 






1: import java.io.*; 
2: import java.sql.*; 

3: import javax.servlet.*; 
4 

5 







: import javax.servlet.http.*; 
: import file_utilities.*; 









public class SurveyServlet extends HttpServlet 
{ 


C7 
. 
e 
2 


Figure 3.7. SurveyServlet. 
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I Lines 1-5 of Figure 3.7 are used to import the various libraries 
that the servlet code will use. Class SurveyServlet evbenas: or inherits, 
the methods and data members of HttpServlet. Hence, SurveyServlet gets a 
lot for free, but in order to know what it is that SurveyServiet already 
has by virtue of the inheritance, we have to look at the HttpServlet 
class. If you have obtained the Servlet SDK,. you will find the source 
code for HttpServiet (contained in the file HttpServletjava). There is a 
brief explanation of what the class is used for: 


An abstract class that simplifies writing HTTP servlets. It 
extends the <code>GenericServlet</code> base class and provides 
an framework for handling the HTTP protocol. Because it is an 
abstract class, servlet writers must subclass it and override at 
least one method [Ref. 11]. | 


and the documentation goes on to inform the reader what HttpServlet 
methods are generally overridden and what these methods do. Looking 
through the HttpServlet source code, we find pre-defined implementations 
for the following methods: 


e doGet: 
protected void doGet (HttpServletRequest req, HttpServletResponse resp) 


throws ServletException, IOException { 
_ resp.sendError (HttpServletResponse.SC_BAD REQUEST, 
"GET is not supported by this URL"); 


e doHead: 
private void doHead (HttpServletRequest req, HttpServletResponse resp) 


_ throws ServletException, IOException { 

NoBodyResponse response = new NoBodyResponse(resp); 
doGet (req, response); | 
response.setContentLength (); 


} 


e doPost: 
| protected void doPost (HttpServletRequest req, HttpServletResponse resp) 


throws ServletException, IOException { 
resp.sendError (HttpServletResponse.SC_BAD REQUEST, 
"POST is not supported by this URL"); 


e doPut: 
protected void doPut (HttpServletRequest req, HttpServletResponse resp) 


throws ServletException, IOException { 
resp.sendError (HttpServletResponse.SC_BAD REQUEST,, 
"PUT is not supported by this URL"); 


e doDelete: 
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protected void doDelete (HttpServletRequest req, HttpServletResponse resp) 
throws ServletException, IOException { | 
resp.sendError (HttpServletResponse.SC_BAD REQUEST, 
"DELETE is not supported by this URL"); 
} 


As mentioned earlier, the GET and POST actions are the most 
common operations that are generated from form submissions on HTML 
pages. Since SurveyServiet inherits methods from HttpServlet and is invoked 
via a POST operation from the HTML page, it would be wise to override 
the default behavior of the method doPost. If we fail to do this, an 
error will be returned to the client indicating that “POST is not 
supporting by this URL.” 

Before looking at this method, however, recall that earlier, when 
we talked about advantages of servlets over cgi programs, we said that 
servlets can perform resource-intensive operations once and then share 
these resources among all servlet invocations. This implementation is 
extremely beneficial because it greatly reduces the amount of overhead 
involved in performing database connections. Whereas CGI programs must 
continually create and destroy such connections, servlets perform the 
connection only once in their init method. Multiple servlet invocations 
can share the connection resources amongst themselves, and requests or 
queries are queued as they are made. When a servlet is destroyed, it 
can release the resources it is holding by performing the necessary | 
actions in the method destroy. 

Because SurveyServiet has to communicate with two databases, it has 


an init method, and it is here that our database connections are made: 


| 
2: //Function:  initO | | 
3: //Parameters: config - a servlet configuration object; this object is not 
4: // manipulated in the code; rather, the superclass is called, 
5: / and the object is manipulated by that class 
6: //Return type: None | 
7: //Purpose: Initializes the servlet. Resource-intensive procedures, such as 
8: // making a database connection, as well as shared resources, such 
ae as the WriteToFile object, which stores a backup of the survey 
10: // information, is done here. , 
1]: //------------------------- nnn nn nnn nnn nnn nnn nnn nn nnn nn nn nena nena senna nnnnnnennnanennnnna= 
12: public void init(ServletConfig config) throws ServletException { 
13: super.init(config); 


14: //shared resources of all servlets - a connection to the database, and 
15: //a thread that saves a backup of form data to a plaintext file in the 
16: /Nogs directory ; 
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try { 


Class.forName("connect.microsoft.MicrosoftDriver"); 

con] = DriverManager.getConnection(url1, "sa", ""); 

con2 = DriverManager.getConnection(url2, "sa", ""); 

stmtl = conl.createStatement(); 

stmt2 = con2.prepareStatement("SELECT * FROM Num_List WHERE Unit_ID = ?"); 
fileop = new file_utilities. WriteToFileQ); 


catch (java.lang.ClassNotFoundException e) { 
‘System.out.printin(e.toString()); 
generalError = true; 


} 
catch (java.sql. SQLException e){ 
generalError = true; 





a init() 

Figure 3.8. Servlet init method - performing resource-intensive 

operations. 

The init method takes a ServletConfig object and sends it to the 
superclass’ (HttpServlet) init method for initialization. A ServletConfig 
object is used for servlet configuration, and once the superclass has 
initialized it as appropriate, there is nothing more that SurveyServlet 
needs to do with it. Line 17 is where SurveyServiet loads a JDBC driver 
and uses JDBC to make connections to databases at urll and url2 (see 
Appendix F). Suffice it to say that connections are made to both 
databases (if not, then exception handling will take care of the 
errors). once the connections are made and JDBC. statement objects are 
initialized (lines 21 and 22), the init method is complete. The 
servletrunner (discussed in section F of this chapter), once informed 
of where the SurveyServiet class file is, runs and waits for a client to 
invoke the servlet. The very first time information is sent from the 
HTML form to the servlet server, the servletrunner initializes the 
SurveyServiet by executing its init method then executes the remainder of 
the code. On this first invocation, connections are made to both 
databases, and there appears to be a great amount of overhead 
associated with this operation. By observing subsequent invocations, 
you will see that this delay occurs only once - during the very first 
servlet invocation - and the response time is extremely fast 
thereafter. 

To process the information from the HTML form, SurveyServlet 
explicitly overrides the doPost method. After the init method is complete, 


execution continues with the doPost method as outlined in Figure 3.9: . 
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|| SETAE LETS EAC IEEE TORTS AD STROM CIEE EP CR Ae LE NE SE 
//Function: doPostQ) | 
//Parameters: request - an HttpServletRequest object that allows us to 


// grab the values the client sent the servlet | 
// response - an HttpServietResponse object that allows us to 
// return a response back to the client | 


//Return type: None > 
/fPurpose: Makes several calls to utility functions that operate on the 


// client's input - the client is redirected to a different page 
sa depending on the success or failure of the POST operation. 
1 [[ann-nnnennn nnn nnn naan nnnn nnn nn nn nw nn nnwnnn mannan senna nnn anna nanan ennnnnaeenenaneneen 


public void doPost(HttpServletRequest request, HttpServletResponse response) 
throws ServletException, IOException { 


entryError = false; 
boolean goodID = false; 


if (!generalError){ 
_ parseFormData(request); 


goodID = checkSurveyNumbersDatabase(); 
if (goodID){ 
makeDatabaseEntry(response); 


if (!entryError) { 
fileop.startQ); 
fileop.write(clientdata, ipAddress, host); 


try { 
response.setContentType("text/html"); 


response.sendRedirect("http://spitfire.avsafety.nps.navy.mil/Thank You.htm1"); 


catch (java.io. IOException e){ 
System.out.printin(e.toString()); 


} 


else { : 
response.sendRedirect("http://spitfire.avsafety nps.navy.mil/NumberError. html"); 
} : : 


} 


else 
response.sendRedirect("http://spitfire.avsafety.nps.navy.mil/GeneralError.htm|"); 


}//end doPostQ) 

Figure 3.9. Overriding the doPost method to handle HTML form input. 
The doPost method receives two objects: | 

an HttpServletRequest object that allows us to grab the values of the 

information the client sent us, and | | | 

an HttpServletResponse object that enables the servlet to communicate 

with the client either by sending back raw HTML code, or redirecting 


the client to another page. 
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These objects’ methods, their methods’ signatures, and what these 
methods do are documented at Javasoft’s web site [http://javasoft.com] 
Line 16 checks to make sure there are no general errors (such as 
failure to connect to a database), and if there are none, we proceed to 
parse the form’s data. We have a method in SurveyServiet that does this 
for us - parseFormData (see Figure 3.10) - and it requires the | 
HttpServietRequest object that was initially received by our doPost 
method. | | 


AQ. 
41. //Function: parseFormDataQ) : 
42. //Parameters: request - an HttpServletRequest object that allows us to 
43. // grab the values the client sent the servlet 

44. //Return type: None 

45. //Purpose: _ Retrieves the form information that was sent to the servlet. 


7 ag [ete tee neon nd etree eres Revere nee rte eee en PIE 


47. private void parseFormData(HttpServletRequest request) { 









SS ee 










48: ipAddress = request.getRemoteAddr(); 
49: host = request.getRemoteHost(); 










//form parameters - form is made up of bio_data and questions 
squadron_type = new String(request.getParameter("community")); 

by unit_number = new String(request.getParameter("squadron_number")); 
53: survey_number = new String(request.getParameter("survey_number")); 








54: java.lang.String bio_data[] = {"community”, "rank", "designation", "flight hours", "type_hours”, 
55: "department head", "status", "service", "location"}; , 





56: java.lang.String questions[{] = new StringjNUM_SURVEY QUESTIONS]; 






57: for (int ix=0; ix<NUM_SURVEY_ QUESTIONS; ix++) 
58: questions[ix] = "question" + Integer.toString(ix+1); 







59: _ for (int jx=0; jx < clientdata.length; jx++){ 






60: if (jx < NUM_BIO QUESTIONS) 

61: clientdata[jx] = request.getParameter(bio_data[jx]); 

62: else | 

63: clientdata[jx] = request.getParameter(questions[jx-NUM_BIO QUESTIONS)); 
64: } 





} //end parseFormData() 
Figure 3.10. parseFormData - getting the client’s input. 

The request object is used on lines 48 and 49 to get the Internet 
Protocol (IP) address of the client that invoked the servlet, as well 
as the host name of the client's machine. These values are saved for 
later use in a log file. Lines 51-53 store the values from the form’s 
community, squadron number, and survey number fields. We obtain these 


values by using the request object’s getParameter method. This method 
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takes a string (the field from the form you want to evaluate) and 
returns a string containing the lone value of the specified value or 


null if the field does not exist.. 


The clientdata array is used to hold values for the biographical 
data, as well as the client’s responses to 61 questions. Once 
processing is complete, we return to line 18 of the doPost method. 
Because the ACSA survey is only intended for military personnel use, we 
need some manner of identifying whether the client that submitted 
information to us is a valid participant in the survey. 

In order to implement some kind of security check, we opted to 
create a database that stored a range of valid survey numbers for each 
squadron. The function checkSurveyNumbersDatabase performs this task. If 
the survey number is not valid for the squadron, the client is 
redirected to the NumberError.html page. If the survey number already 


exists for that squadron, a SQLException occurs and the method 


handleSQLException takes over: 






66. /[annnn-nnnnnnnnnnn nnn anew enna anna nn ne nee nnn nn nena nnn nnnen een nwennnnannennanncnnnoneseneneenenamn 
67. //Function: handleSQLException() 

68. //Parameters: response - an HttpServletResponse object that allows us to 

69. // return a response back to the client - | 

70. // ex — an SQLException 

71. //Return type: None 

72. //Purpose: | Generates HTML code that indicates to the user what SQL Error 
73. // was generated. 


SS as Caer seen ene noe ater nese none 
75. private void handleSQLException(HttpServletResponse response, java.sql.SQLException ex){ 











. java.lang.String errorMessage = new String(); 
77. while (ex != null){ 
78. errorMessage += ("<br>Message: " + ex.getMessage() + "<br>SQL State: " + ex.getSQLState() 
79. + "<br>Error Code: " + ex.getErrorCode() + "<br>"); 

80. System.out.println("Error executing SQL statements. Transaction not entered. \n"); 

81. System.out.println("----------------------------------------n anes ne nena n=") 

82. ex = ex.getNextException(); 


} 


try { 
85. PrintWriter out; 


86. response. setContentT ype("text/html"); 


87. out = response.getWriter(); 
88. out. printn<him><hex><tl>Ero!<hitle><Ihead><body becolor=#000000 link=#00FFFF>" 


89. + "<p><font color=#FFFF00 size=4>A problem was encountered while " + 

90. "trying to process your input. Possible causes for this are listed " + 

91. "below. If you have additional questions as to why your input was " + 

92. "not accepted, you may contact the webmaster at </font>" + 

93. "<big><a HREF=mailto:spitfire.avsafety.nps.navy.mil>A VSafetyCenter</a></big>" 
+ "<font color=#FFFF00 size=4>, or you may complete the survey again " + 

"and try resubmitting it.</font></p><p><font color=#FF0000 size=4> "+ 
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errorMessage + "<[big></big></font></p></body></html>"); 








, | 
98. catch (java.io. IOException e){ 
99. System.out.printIn(e.toString()); 
100. } 
101. }//end handleSQLException() 
Figure 3.11. Providing the method handleSQLException for client error 
notification. | 





handleSQLException determines what the exact error was, saves the 
error message, error state, and error code in the string errorMessage, 
then prepares to respond to the client. The PrintWriter object (line 85) 
is what we’ll use to write HTML back to the client. Since the response 
object already contains a writer we can use for this purpose (we could 
not create a new one for this purpose on our eas we simply call the 
method getWriter. This method returns a reference to the PrintWriter we 
need, and lines 88-96 use the PnntWmriter object we have called “out” to 
send HTML back to the client. 

Assuming that the client is authorized to submit survey 
information, execution continues on line 20 of Figure 3.9 with a call 
to makeDatabaseEntry. This function contains the JDBC code necessary to 
enter the information into the SQL 6.5 database. If there are no SQL 
exceptions and the database is updated, the client is then redirected 
to the ThankYou.html page. 

Once the user is redirected, execution of SurveyServlet is 
complete. A graphical overview of SurveyServlet flow control is presented 


in Figure 3.12 for your reference: 
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[Tan 


makeDatabaseEntry 





Figure 3.12. surveyServiet flow control. 


Fr. CONFIGURING THE SERVLETRUNNER UTILITY 


Servletrunner is a multi-threaded, executable program bundled with the 
Servlet SDK that handles requests for servlets. Because it is multi- 
threaded, servletrunner can handle requests for multiple servlets 
Simultaneously [Ref. 12]. 

After you have developed and compiled your servlet code, you must 
tell the servletrunner, prior to starting it, where the code is 
located. To do this, you modify the file servlet.properties. This ASCII text 
file uses key-value pairs to specify the name of the servlet code and 
if the servlet has any initial arguments that need to be passed to it. 
Configuring the servletrunner for SurveyServlet, we added: 

serviet. Survey Servlet. code = SurveyServlet 

This line informs the server of two things: there is a servlet, 
named SurveyServilet, that may be requested, and if it is requested, the 
code for the servlet can be found in a file named SurveyServlet.class. In 
general, where servlet code resides is specified using the following 
syntax: 


servlet.name.code = classfile, 
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where name is the name of the servlet as referenced from the HTML page, 
and the classfile is the corresponding Java™ class bytecode to execute 
when the servlet is requested. In this manner, it is not necessary for 
the name of the classfile and servlet to be identical, however, it does» 
add clarity to servlet configuration when they are the same. 

To send initial arguments to the servlet, use the following 
syntax: 


servlet.name.initargs=\ 
<arg 1>=<value 1>,\ 
<arg 2>=<value 2>, \ 


<arg n>=<value n> 


The initial argument property must be a single logical line and 
requires the backquote syntax to allow the property to span multiple 
lines in the file [Ref. 12]. Once you are done modifying the 

“ serviet.properties’ file, you can start the server by typing “servietrunner’ 
at the command prompt. | 


‘If successful, you should see something like this: . 





Figure 3.13. Starting the servletrunner. 


By invoking the servletrunner at the DOS prompt with “serviletrunner/?” or 
“ servietrunner —help”, you can obtain a list of configurable settings: 


Usage: servletrunner [options] 

Options: 

-p port the port number to listen on 

-~b backlog the listen backlog 

—-m max maximum number of connection handlers 
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-t timeout connection timeout in milliseconds 

~d dir servlet directory 

-r root document root directory 

~s filename servlet property file name 

-v verbose output 
The default port settings are shown in Figure 3.13. | 

With this information, you should now be able to write, run, and 

test your own Java™ servlets in no time at all. If you make changes to 
your servlet code and want those changes to take effect, you will need 


to stop the servletrunner and restart it. 


G. CONCLUDING REMARKS 


Servlets are extremely easy to write and use and are supported by 
an extensive and well-documented API. Using servlets gives you other 
benefits as well: the stability of the Java™ programming language 
requires that all possible exceptions, or programming errors, that 
could occur during the course of execution are appropriately handled. 
This means that your program, if properly written, should not crash. 
Additionally, your servlets inherit all of the limitations posed by the 
Java™ security model, so unlike cgi programs, malicious hackers cannot 
exploit your programs for their benefit. Finally, RAD tools 
significantly reduce development time, allowing you to deploy serviet 
solutions in a matter of hours. All of these advantages strongly 


suggest that servlets are an acceptable and better substitute for CGI. 
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IV. MICROSOFT’S ACTIVE SERVER PAGES (ASP) 
A. ASP BACKGROUND 


Microsoft’s Active Server Pages (ASP) technology was originally 
introduced with the release of the company’s third version of Internet 
Information Server (IIS) and its Personal Web Server (PWS) software. 
These freeware web servers for the Windows NT/98 and 95 platforms can 
be downloaded from [http://www.microsoft.com]. If you are using another 
vendor's web server, you can get the same ASP functionality by 
installing Chili! ASP. This product is the equivalent of Microsoft's 
ASP but extends ASP operability to Netscape, Lotus, IBM and other web 
servers [Ref. 13]. | | 

ASP is a fairly new technology that is only a small part of 
Microsoft's larger Active Platform Internet strategy. According to 
Microsoft, the Active Platform | 

.LS an open, standards-based software architecture 

for delivering rich content and line-of-business 

applications over the Internet and intranets. It 

combines the power of PC and network computing to 

link people with information, anywhere, any time 

[Ref. 14]. 

Unfortunately, this tells us little about what the Active Platform idea 
really is. As you read further into Reference 2, it becomes clearer 
that the Active Platform is a very broad concept that consists of 
technologies related to HTML, scripting, and ActiveX or JavaBean™ 
components. If the HTML, scripts, and components are executed on the 
client's machine, then they are part of what is called an Active Client; 
‘similarly, should the opposite occur, then we have what is called an 
Active Server.. The Active Client, Active Server, and reusable components are all 
part of the Active Platform strategy. 

Aside from being a new buzzword to add to many others, the Active 
Platform strives to promote language transparency and component reuse by 
adhering to approved standards. Vendors that create products based on 
these standards give developers invaluable tools that allow them to 
create rich, content-aware, platform-independent web sites almost 
effortlessly. So where does ASP fit into all of this? 

ASP is an open compile-free application environment that allows 


developers to use HTML, scripting, and components to create dynamic and 
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powerful Web-based sites. This makes ASP an indispensable part of the 
Active Platform strategy. | | 
To understand how ASP works, you should know the following: ASP 

is nothing more than a component that is used by a web server for 
processing special files. When a client requests a file that has an .asp 
extension, all scripting code in the file is processed on the server, 
and the server returns the processed output in the form of HTML back to 
the client. ASP allows developers to create programmable web pages that 
mix HTML and ODBC database operations without any knowledge of CGI, 
JavaScript, PERL, Activex, or ISAPI [Ref. 15]. 

| So why use ASP? Apart from the reasons cited above, there are a 
number of additional advantages to using ASP technology: 


1. ASP is extremely easy to learn. Key points to remember when 
developing with ASP are: 


e ASP uses the special scripting delimiters <%%> and 
<%= %>. The former pair of delimiters is used to enclose 
ASP script blocks, while the latter is used solely for 
the purpose of evaluating ASP expressions. 


e ASP is comprised of five built-in objects (Application, 
Session, Request, Response, and Server) with many . 
predefined methods and properties. 


e ASP provides native support for both VBScript and 
Jscript. Effectively and efficiently using either 
scripting language allows you to develop extremely 
robust web applications. a, 


2. ASP development does not require any compilation. Prior to 
ASP, interactive web sites that used CGI programs or ActiveX 
components required an Integrated Development Environment 
(IDE) such as Microsoft’s Visual C++ in which they could first 
be compiled, and then the executable code was placed in the 
appropriate subdirectory on the web server. 


3. ASP allows you to protect your code. Previously, client-side 
scripting was standard, but how the script behaved could be 
determined by viewing the HTML source of the web page. By 
executing the script on the server, the client can no longer 
see the code or interpret its meaning and proprietary 
algorithms can be protected without fear of compromise. 


B. THE ASP OBJECT MODEL 


The five built-in objects that ASP provides are special because 
they do not require any configuration or initialization before you can 


use them in your scripts. If you are familiar with the concepts of 
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Object-Oriented Programming (OOP), you should have no problem 
indevetanaing how the five ASP objects work and how to access their 
methods and properties. | 

This section gives you a brief overview of the ASP object model 
and how each object is used in a typical ASP application. Once you have 
read through this introductory material, we move on to discuss the 
ActiveX Data Objects (ADO) and how they are used in conjunction with 
ASP to create database-driven web pages. 

1. APPLICATION Object 

You can use the Application object to share information among all 
users of a given application [Ref. 16]. Variables stored in the 
Application object have application scope, persist throughout the duration 
of application execution, and are accessible to subsequent web pages. 
These variables are defined in the file global.asa, which can also 
include code for the events Application_OnStart, Session_OnStart, 
Application_OnEnd and Session_OnEnd. 

The “firing sequence” of events begins when the web server 
processes the very first request for an ASP-based application. The 
order in which events are processed is as follows: 

1. Application objects are created when the first client connects to 


an ASP-based application and requests a session. 


2. When the Application object is created, the server looks for the 
global.asa file, and if the file exists, executes the script in 
the Application_OnStart event handler. If the global.asa file has 
been modified since the last time it was loaded, the web 
server loads the new, updated copy. 


3. Once the code for the Application_OnStart event handler is 
executed, a Sessionobject is created and program control moves 
to the Session_OnStart event handler. | 


The sequence for destroying these objects occurs in the exact reverse 
order, and the Session object is disposed of prior.to the destruction of 
the Application object: | 


4. When the Session object times out or the Session.Abandon method 
is called,: the Session_OnEnd event in the global.asafile is | 
triggered. Once this code is done executing, the Session object 
is destroyed. 


5. When the server is shut down, the Application.OnEnd event is 


triggered, code in the event handler is executed, and the 
_ Application object is destroyed. 
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The following table highlights the syntax, methods, and events of the 


Application object: 


concurrently accessing Application objects. 
| objects. 


EVENTS: Application_OnStart Contains code that is executed before the 
very first new session is created. Of the 
five ASP objects,. only the Application and 
Server objects can be used in script code. 
For this event handler. 

Application_OnEnd Contains code that is executed when the 
application quits. This event handler is 
executed just after the Session_OnEnd event 
is processed. 


Table 4.1. The Application object. 





2. SESSION Object 


Immediately after the Application object is created, ASP starts a 
“session” for the client. This session is different for every user 
visiting your site, and it is by using the Session object that ASP 
can differentiate one user from all others. Session information is 
explicitly set in the Session_OnStart event handler of the global.asa file, 
and its contents are available as long as the session is kept active. 
As a user jumps from one web page to another, the information in the 
Session object persists. It is only after the session expires, or it is 
explicitly abandoned, that the web eerueEe calls the Session_OnEnd event 
handler and the object is destroyed. | 

The Session object can be used for any number of reasons, but it is 
especially well suited for storing user preferences or establishing 
database connection parameters. The Session object is often used for the 
latter purpose, as it allows you to have all the information necessary 
for opening resource-intensive data source connections when needed 
rather than during the entire duration of an ASP application. 

By using multiple, independent global.asafiles, you have the flexibility 
to dynamically change both Application and Session object information. 

Unfortunately, session information can only be maintained for 
browsers supporting cookies. A cookie is used to coordinate the user's 
session id [Ref. 17]. If clients do not allow cookies, or they are 


using older browsers that do not support cookies, you cannot use the 
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_ Session object. Another subtle point you should note about the Session 
object is that session data is stored on the server, not the client's 
browser. You should take care to optimize your use of session 
parameters, otherwise, you may place an extraordinarily heavy load on 
your server. 


Table 4.2 gives an overview of the syntax, properties, and 


methods of the Session object: 


PSYNTAX: | Session.property |method 


PROPERTIES: SessionID Returns a unique session identification 

number for the user. The number is unique 
only as long as the web server is running. 
Once it is stopped, then restarted, 
session id numbers may be repeated. 


Timeout The time, in minutes, for the session 
state of the ASP application. 
METHODS: Abandon Explicit call to destroy a Session object 


and release its resources. 
Table 4.2. The Session object. 




















3. REQUEST Object 


The Request object is used to retrieve values that the client | 
passes to the web server during an HTTP request [Ref. 18]. The values 
that are passed not only include form input, but also environmental 
variables, certificate information, and cookies. Information is stored 
in various collections within the Requestobject, and these collections 
can be used to access the client information. ASP provides five | 


collections, as shown in Table 4.3. 


COLLECTION PURPOSE ;, 


ClientCertificate Holds the value of fields stored in the client 
3 certificate. 













Holds the value of cookies. 


Form Holds form values processed via the POST 
method. 


QueryString Holds form values processed via the GET method. 


ServerVariables Holds environmental variables, such as 

* REMOTE_HOST’, “ REQUEST_METHOD’, 

“ SERVER_NAME”, etc... (For a complete listing of 
environmental variables supported by IIS, see 
Chapter III, Figure 3.4) 

Table 4.3. The five Request object collections. 









57 





When using these collections, there are several important points 


to remember: 


e If you request a variable that is not in one of the preceding 
five collections of Table 4.3, the Request object returns 
EMPTY. 


e When you use ASP to process form input, the variables that are 
referenced in the Form or QueryString collections can be found 
embedded in the code for the HTML form object. With complex, 
multi-page forms that have to be processed, it is a wise idea 
to have a copy of the HTML code next to you when developing 
ASP scripts to process your data. | | 


e The proper syntax to access a collection is 
Request. [ Collection] ( variable) 


4. RESPONSE Object 


Now that you have client information and can process it in 
whatever manner you so desire, the next logical step is to provide you 
with some means of communicating back to the client. ASP gives you the 
Response object for this purpose. Of all ASP objects, the Response object 
is used the most and it supports the properties and methods outlined in 


Table 4.4. 


|SYNTAX: = CC—C*dsSRespoonsee.colllection | property |method 
: client's browser accepts them. 
. output is buffered. i 
is being returned to the client. 
Specifies the length of time, in minutes, 
that a page can be cached on a browser; if 
set to zero, the page will not be cached. 


ExpiresAbsolute Lets you specify the date and time that a 













page will expire. If no time is specified, 
the page expires on midnight of that day. 
The date and time must be in Greenwich 
Mean Time (GMT) format as outlined by 
Request For Comments (RFC) 1123. 
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Allows you to indicate what the server 

status is. Common values and their 

meanings are: 

e 200: The request was successful and the 
data is forthcoming. | 

e 301: The requested content has 
permanently moved to a new location. 

e 302: The requested content has 
temporarily moved to a new location. 

e 404: The requested content does not 
exist on the server. 

e 500: The server encountered an internal 

error while processing your request. 


Allows you to create your own HTTP header 
| and send it to the client. 
Adds a string to the end of the web server 
log for this request. 
Write information to the HTTP output - 
| stream without any special character 
Erases any buffered HTML output. 


conversion. 
End Stops processing the ASP application and 
returns the results up to the call to End. 
































Sends buffered HTML output immediately to 
the HTTP output stream. 
Redirect Sends a redirect message to the client's 
. browser, causing the browser to open a new 
URL. | 
stream. 


Table 4.4. The Response object. 










5. SERVER Object 


The Server object is probably the least used ASP object. This 
object has only one property - ScrnptTimeOut- that allows you to set the 
value for when script processing will stop. Any script that runs longer 
than the time specified by ScriptTimeOut is assumed to have misbehaved 
and will be terminated to free system resources [Ref. 9]. The default 
value for this property is 90 seconds. 

Of the object’s four methods (CreateObject, HTMLEncode, MapPath, and 
URLEncode) , CreateObject is used the most. This method creates server 
(ActiveX) components that are part of a web-based ASP application. 
These components, which are based on the Microsoft Component Object 
Model (COM) and Distributed Component Object Model (DCOM), provide key 
functionality for common web page tasks (e.g. database access, counting 


page accesses, etc..). They exist so that you do not have to create or 
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recreate the code to perform these tasks. Of the many components 


included with ASP, the most frequently used ones are listed in Table 


Ais 





COMPONENT . PURPOSE 


Database Access (ADO) Provides access to databases from your web 
| application. 


Ad Rotator Alternates a series of images. 


on a web page. | : 
browser’s capabilities are. 
the server. 


Content Linking Allows you to provide logical navigation _ 
through the .aspfiles that are part of an ASP 
application. 


MyInfo Keeps personal information about the web site 
administrator. 


Tools Provides methods for random number generation, | 
checking for the existence of a form, etc... 


Page Counter Counts and displays the number of times a web 
page have been requested. 
L972 


Table 4.5. ActiveX components included with ASP [Ref.. 




























With the Server object, you can easily use one of these 
components, develop your own, or use someone else’s. Whatever the case, 
the syntax for doing so is always 


Set variablename = Server.CreateObject(registeredobject) 
Cc. ACTIVEX DATA OBJECTS (ADO) OBJECT MODEL 


Over the years, Microsoft has created a number of object models 
that you can use to access data sources. The ADO is the most recent 
model, and provides an interface is the OLE DB SDK [Ref. 20]. A factor 
in considering which model to use is how reliable and durable the model 
is, as well as what kinds of support the manufacturer provides for it. 
Microsoft has made it publicly known that the ADO will replace the 
company's older data-access models (such as Data Access Objects (DAO) 
and Remote Data Objects (RDO)). Figure 4.1 illustrates some of the 
differences between these models. For example, while DAO and RDO offer 
access support to SQL data through ODBC calls, you will notice that 
these models cannot interact with non-SQL or legacy data sources. 

Another advantage of transitioning now to ADO programming is that 
ADO capabilities will be expanded. Not only will ADO allow developers 
to access relational data providers, but there is also continuing work 


in supporting access to non-relational ones as well. 
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The ADO are used with many of Microsoft's products. While it is 
certainly an integral part of ASP, you can also find ADO support in 
other products such as Visual Basic and Visual C++. Once you have your 
machine configured for ADO support (you can do this by installing 
either of the previously mentioned software products, Visual InterDev, 
IIS, or the OLE DB SDK), you can create database-driven web pages. 

The ADO object model is relatively simple and consists of four 
primary objects as illustrated in Figure 4.2. We will briefly describe 
how these objects are used, some of their methods and properties, and 
how you might use them in your ASP applications. For a complete, well- 


documented reference to the ADO Application Programming Interface 
(API), you should go to [http:/Awww.microsoft.com/data/reference/ado2/default2.htn}] or 
[http:/Avww.microsoft.com/data/reference/ado2.htm] : 


The major ADO objects, collections, and their purpose are shown 


in Tabe: 4.6: 


Object 
Creates a connection to a data provider. 


forward and backwards through Pecoudsete \carsors):, 
Points to SQL strings, stored procedures, or action 

queries” that you can execute. 

data-access attempt. 


Table 4.6. ADO objects [Ref. 21]. 







Application 


SQL Data 7 Non SQLData  “T Mainframe 
SQL Server Oracle HJ Mail Video Directory # and Legacy 


| Jet FoxPro Other ] Text Other Services | Bee 





Figure 4.1. Comparison of ADO, DAO, and RDO [Ref. 22]. 


61 


Connection 
Command 


Parameters 


Figure 4.2. The ADO object model [Ref. 23]. 





1. CONNECTION object 


All ADO objects can be created independently, But they cannot 
communicate with a data source unless they go through the Connection 
object. The Connection object allows you to connect to a data source, 
perform insert, delete, ‘and update operations, and execute SQL queries. 
After you have successfully created a data source on your machine (how 
to do this is discussed in Chapter V), you can use the source's name to 
let the Connection object know what database on the server you intend to 
interact with. To create a Connection object, use the following syntax: 


Set variablename = Server.CreateObject("ADODB. Connection") 


Some of the more frequently used collections, methods, and properties 


of a Connection object include: 


Opens a network connection to a data source. 


Closes the network connection. ~ 

Sets the maximum value that ADO will wait when 
attempting to make a connection to a database. 
The default value is 15 seconds. 
Collection that allows you to examine errors 
that occur when you attempt to interact with a 
data source. ? | 


Executes a SQL statement on the data source. 


Table 4.7. Common collections, methods, and properties of the Connection 
object. | 
















ConnectionTimeOut 
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2. RECORDSET object 


When you perform a query on a database using SQL, you need some 
means of retrieving the results produced from that the query. A 
RecordSet (or cursor) object allows you to do this. With a RecordSet, you 
can navigate through your results one row, or tuple, at a time. As you 
examine each row, you may look at all columns or fields of data, or you 
may choose to be selective in what you examine. What you should realize 
about the ADO RecordSet object is that it is not a composite object, 
i.e. it is composed of Field objects that represent each column of data 
in your row. You can create a RecordSet in the following manner: 


Set variablename = Server.CreateObject ("ADODB.RecordSet") 


There are properties of the RecordSetthat you can Bee at the time 
you create it. These properties allow you to specify what type of 
finctionaii ty you want your RecordSet to have. The four different types 
of RecordSets are: | 


1. Dynamic: Allows you to view additions, changes, and deletions 
by other users, and you can freely jump to different locations 
(rows) in the RecordSet. 


2. Keyset: Behaves like a dynamic RecordSet, but you cannot see 
records that other users add or delete. Data changes made by 


other users are still visible. 
\ 


3. Static: The only type of RecordSet allowed when opening a client- 
side RecordSet object. 


4. Forward-only: Behaves identically to a dynamic RecordSet, except 
that it allows you to only scroll forward through a RecordSet. 
A forward-only cursor is created by default. 

Once you have a RecordSet with data, it is extremely easy to 
navigate through each of the fields. To demonstrate how this is done, 
we have provided the source code for a short ASP application. This 
program connects to the ACSA Questionnaire and prints a table with all. 


of the database's values. 
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1: <%~%@LANGUAGE="VBSCRIPT"%> 

2: <!--#include filel="ADOVBS.INC"--> | 

3: <% Query = "SELECT Biographical_Data.*, Questions.Q1, Questions.Q2," &_ 
4: "Questions.Q3, Questions.Q4, Questions.Q5, Questions.Q6,"  &_ 

5: "Questions.Q7, Questions.Q8, Questions.Q9, Questions.Q10," &_ 

6: "Questions.Q11, Questions.Q12, Questions.Q13, Questions.Q14, " & _ 

fs "Questions.Q15, Questions.Q16, Questions.Q17, Questions.Q18, " & 

8 "Questions.Q19, Questions.Q20, Questions.Q21, Questions.Q22, " & _ 

9 "Questions.Q23, Questions.Q24, Questions.Q25, Questions.Q26, " & 


10: "Questions.Q27, Questions.Q28, Questions.Q29, Questions.Q30, " & 

11: "Questions.Q3 1, Questions.Q32, Questions.Q33, Questions.Q34, " &_ 

12: "Questions.Q35, Questions.Q36, Questions.Q37, Questions.Q38, " & _ 

13: "Questions.Q39, Questions.Q40, Questions.Q41, Questions.Q42, " & 

14: "Questions.Q43, Questions.Q44, Questions.Q45, Questions.Q46, " &_ 

15: "Questions.Q47, Questions.Q48, Questions.Q49, Questions.Q50, " & 

16: "Questions.Q51, Questions.Q52, Questions.Q53, Questions.Q54, " & _ 

17: "Questions.Q55, Questions.Q56, Questions.Q57, Questions.Q58, " & 

18: "Questions.Q59, Questions.Q60, Questions.Q61 " & 

19: "FROM Biographical Data INNER JOIN Questions ON " & 

20: "(Biographical_Data.Survey_Number = Questions.Survey_Number) AND " &_ 
Zi: "(Biographical_Data.Squadron_Number = Questions.Squadron_Number) " &_ 
pa be "AND (Biographical_ Data.Community = Questions.Community)" 


23: set connectobj = Server.CreateObject("ADODB.Connection") 
24: connectobj.Mode = adModeRead , 
25: connectobj.Open "Survey2_DB", "sa", "" | 
26: set records = Server.CreateObject("ADODB.RecordSet") 
27: set records = connectobj.Execute (Query, RecordsAffected, adCmdText) 
28: %> 7 
29: <htm]> 
30: <head> 
31: <title>The ACSA Questionnaire Database</title></head><body> 
32: <table border="2" cellspacing="2" bordercolor="#800000"> 
33: <TR> <TD><font size="5"><b><i>Record Number</b></i></font></T D> 
34: <%for each label in records.Fields%> 
35: <TD><font size="5"><b><i><%=Ilabel.Name%></b></i></font></TD> 
36: <Y%next%> 
37: </TR> 
38: <% count = 1 
39: do until records. EOF%> 
40:<TR><TD><font size="4"><%= count %></font></TD> 
41: <%for each x in records.Fields%> 
42: <TD><font size="4"><%=x. Value%></font></TD> © 
43: <Y%next 
44: records.MoveNext 
45: count = count + 1 %> 
46: </TR> 
47: <%Loop 
48: records.close%> 
49: </table> 
50: </body> 
51: </html> 
Figure 4.3. An ASP application (test.asp) that uses ADO to interact with 
the ACSA Questionnaire database. 
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‘So what does the code in Figure 4.3 do? Let's start with line 2. 
Here, the ASP application informs the web server to include the 
contents of another file before processing the contents of the current 
ASP file. The ability to use information from another file makes ASP 
even more flexible because it allows programmers to develop 
independent, reusable modules that can be shared among many ASP 
applications. 
| The command on line 2 is called a "server-side include," and the net 
effect it has is identical to a C++ #include or Java™ import directive. 
(Note: the file ADOVBS.INC contains constant values used for database 
operations. For example, adModeRead has a value of 1, and is used in 
line 24 to indicate that the user is establishing a read-only 
connection. Because it is read-only, INSERT, DELETE, or UPDATE 
operations are not be allowed). 

| Lines 3 through 22 represent the SQL syntax to query the | 
database. We are asking for all data values from both the 
Biographical_Data and Questions tables, and we are joining these tables 
together by their common attributes (i.e. the composite key fields 
Survey_Number, Squadron_Number, and Community) . | 

When you finally reach Line 23, you come to the Connection object, 
which we create here and appropriately name connectobj. Two lines later, 
we indicate the data source we want to connect to - "Survey2_DB" - and 
include the username "sa" and password "" as parameters to the Open 
method. If all has gone well, we should now have a connection to our 
SQL 6.5 database and can use a RecordSet object to query it. 

Line 26 illustrates the required syntax to create the RecordSet 
object. You will notice that we did not specify what type of cursor we 
are using. When we neglect to inform ADO what cursor type we want, the 
default is to create a forward-only one. Finally, on the very next line, 
we go through the Connection object to execute our query, and the results 
of this query are assigned to the variable records. 

The ASP application then outputs regular HTML code until it comes 
to line 34, where we use a combination of logical VBScript statements 
to step through each row of the RecordSet. Lines 34 and 35 simply 
examine what the field names are for each row, and output these values. 
This is the very first row of the table that we are creating, and it 


tells the client what the data represents. 
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Because we want to keep a count of all records in the RecordSet, 
we initialize the count variable to 1 in line 38. Any time you execute a 
query (as we have done), the RecordSet, or cursor, is positioned at the 
very first tuple (if the data exists). This 1s unlike the JDBC model, 
where the cursor is placed prior to the first record and you must use 
the ResultSet method next to properly position the cursor before 
retrieving results. Since ADO does this for us, we can simply use a 
conditional statement to navigate through the RecordSet until we reach 
its end. The method EOF returns a Boolean indicating whether we have 
reached this point. 

We are now ready to step through each field and output its value 
into a row of the table. This is done in lines 41 to 43, and when this 
step is completed, we reach line 44 which instructs the RecordSet object 
to move to the next tuple. We then increment the count variable and loop 
back to line 39 where we test to see if we are at the end of the 
RecordSet. This iterative process continues until we have spanned the 


entire RecordSet, and the output of this ASP application is a nice, 


tabular representation of the ACSA Questionnaire database as shown in 


Figure 4.4. 
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Figure 4.4. The output of the ASP BED pre sere ates 


must be defined prior to opening a RecordSet. 
Allows you to open a RecordSet. This method is overloaded 
so you can open a RecordSet without a Connection object 


(ADO still creates a Connection object, but it does not 
assign that object to a variable) 
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BOF Boolean used to determine if you are at the beginning of 
a RecordSet. 
RecordSet. 


Move 
MoveFirst | 
Methods allowing you to navigate through a RecordSet. 


MoveLast 
MoveNext 
MovePrevious 
AddNew 
Update 
Delete 


















Methods allowing you to add, update, or delete records 
from a database. 





Table 4.8. Methods and properties of the RecordSet object. 


3: COMMAND Object 


The Command object offers an alternative way of constructing and 
creating instances of RecordSet objects. It represents a command to be 
processed by the data provider, but since not all data providers have 
the capability to process commands, this object is optional [Ref. 9]. 
You should use this object for storing procedures (creating a group of 
SQL statements that perform a logical task), executing bulk operations, 
or manipulating the structure (schema) of a database. 

The Command object is composed of Parameter objects, which 
represent the parameters associated with queries or stored procedures. 
You might choose to use this object when you are continually executing 
queries, many of which only differ by the WHERE or ORDER BY criteria at 
the end of the SQL statement. By creating a stored procedure, you are 
telling the DBMS to keep a set of SQL statements that you provide handy 
for future use. So when you want to perform this query later, the DBMS 
does it for you, using any parameters you pass to the procedure. This 
process greatly enhances database performance (Note: JDBC used the 
CallableStatement for the same purpose). Table 4.9 lists the more commonly 
used methods and properties of the Command object. Because we do not 
use the Command object in our ASP application, use and syntax of this 
object should be referenced from another source such as the ADO API 


documentation. 


Defines the executable text of the 
command, e.g., a SQL statement. 
“8 provider will execute a command. 


Table 4.9. Command object properties. : 
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A. ERRORS Object 


Any operation you perform with ADO has the potential to generate 
one or more errors. These errors represent specific data provider 
errors, not ADO errors. If a problem occurs and you need to know what 
happened, you can reference the Errors collection, which is composed of 
these objects. This collection is cleared every time a new error 
occurs. 

The Errors object, as you might expect, contains only properties 


that you can investigate to determine the nature of the problem: 


¢ The Description property contains the text of the error. 


e Every error has a number associated with it. You can determine 


what error occurred by looking at the Number property, and if 
you choose, have your ASP application perform some action 
based on the error code. 


e The Source property identifies the object that raised the 
error. 


e SQLState and NativeError properties provide information from SQL 
data sources, @.g., primary key violations, fields cannot have 
null values, etc... 


D. ACSA ASP 


Putting it all together requires a solid knowledge of the ASP and 
ADO object model. With that hurdle now cleared, we can discuss how ASP 
is used in the ACSA web site. 

For this thesis, we developed two ASP applications which are used 
to access the ACSA databases. One database allows the client to 
interact with the Num_List_DB database, which contains a listing of 
valid survey numbers for every squadron participating in the survey, 
and the other lets the client view survey submissions fcom clients. The 
source code for each ASP application is almost identical, with small 
variations that correspond to the field names of the database tables. 
Each application has three files that were auto-generated using | 
Microsoft's Visual InterDev. 

Because the code is extremely similar, we will pay meticulous 
attention to the portion that allows an authorized administrator to 
interact with the Numbers database. Understanding how similar code 


works with the Survey2_DB database is left as an exercise for the 
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reader. You can find all seven files - the global.asa file plus three 


files for each ASP application - in Appendix H. 


The shortest and by far simplest file to examine is global.asa: 


: <SCRIPT LANGUAGE="VBScript" RUNAT="Server"> 
: </SCRIPT> 

: <SCRIPT LANGUAGE=VBScript RUNAT=Server> 

: Sub Session_OnStart 


: Session("Num_List_DB_ConnectionString") = "DSN=Num_List; ‘Decchpdonstquadion 

: SuIvey access listing;SER VER=SPITFIRE; UID=sa;PWD=; APP=Microsoft (R) Developer 

: Studio;WSID=SPITFIRE;DATABASE=Num_List_DB" 

Session("Num_List_DB _ ConnectionTimeout") = = 15 
Session("Num_List_DB_CommandTimeout") = 30 
Session("Num_List_DB_RuntimeUserName") = "sa" 

Session("Num_List DB_RuntimePassword") = "" 
Session("Survey2 _ DB , ConnectionString") = "DSN=Survey2_DB;Description=Survey 
: Database; SER VER=SPITFIRE;UID=sa;PWD=;APP=Microsoft (R) Developer | 
14: Studio; WSID=SPITFIRE;DATABASE=Survey2_DB" 
: Session("Survey2_DB_ConnectionTimeout") = 15 
Session("Survey2_ DB CommandTimeout") = 30 
Session("Survey2_DB_ RuntimeUserName") = "sa 
; Session("Survey2_DB RuntimePassword") = "" 
: End Sub | 
: SSCRIPT> 





Figure 4.5. The file global.asa. 


When a user requests either ASP database application, an Application 
object and then a Session object are created. The subroutine called 
Session_OnStart is processed beginning at line 4. Lines 5 through 12 
define several session variables that are referenced later in the ASP 
application code. This information includes the data source name of 
either database, how long the web server will wait to make a connection 
or execute a command before terminating the attempt (lines 8, 9, 15 and 
16), and predefined client usernames and passwords (lines 10, 11, 17, 
and 18). Because these variables persist throughout the lifetime of the 
session, we can conveniently access them when needed. 

Once the web server is done processing this file, the client is 
directed to a tabular listing of the database he requested to see (see 


Figure 4.6). 
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{ 


Figure 4.6. ASP application displaying the contents of the Numbers 
database. 

The ASP file that processes this database view is 
SurveyNumbersList.asp. This 454~line file contains extremely detailed 
source code, providing the client with the ability to navigate through 
all records contained in the database. We will take care to explain 
portions of this file that we feel are worth knowing about. More 
importantly, however, you should have a good idea of the manner in 
which these files interact with one another. For example, clicking on 
the "Form View" button as shown in Figure 4.6 actually sends a command 
to the SurveyNumbersForm.asp application. In this case, the Request 
object that is sent to this application contains two parameters: 

1. a hidden attribute called FormMode with a value set to Edit, 


and 


2. a visible Submit button that is named DataAction and has the 
value "Form View" (this is the button you see in the upper 
right-hand corner of Figure 4.6). 


The SurveyNumbersForm.asp application contains VBScript code that 


evaluates the parameters that are passed to it: 
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1: <% 

2: strFormMode = "Edit" ‘' Initalize the default ; 

3: If Not IsEmpty(Request("FormMode")) Then strFormMode = Request("FormMode") 
4: If Not IsEmpty(Request("rsSurveyNumbersSQLQuery_PagingMove")) Then 


5: StrPagingMove = Trim(Request("rsSurveyNumbersSQLQuery_PagingMove")) 





6: End If 
7: Y%> 
Figure 4.7. Evaluating the Request object parameters passed by 
SurveyNumbersList.asp. 


The variable strFormMode is set to a default value of "Edit" in 
Line 2. The next line determines if the FormMode parameter has a value. 
If the parameter has no value, then the if block is exited, otherwise, 
we assign the value of this paramter to the variable strFormMode. 
We know that the FormMode paramter does indeed have a value, namely 
"Edit", so this value is assigned to strFormMode. Lines 4 and 5 are 
disregarded, because a value for the variable 
rsSurveyNumbersSQLQuery_PagingMove was never sent. The SurveyNumberForm 
application then outputs HTML code that generates a "form" view of the 


data (see Figure 4.8). 


Administration Oo Numbers 


7 Fe oN ar es Teh SL ANE GREET TDM oe nN Pern 
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-Figure 4.8. The "form" view of the Numbers database (file 
SurveyNumbersForm.asp) . 


From here, the client can update, delete, filter or navigate (via 
the "<<", "<", ">", or ">>" buttons at the bottom of the of the page) 
through records, and go back to the list view that was originally 
displayed. Each of the buttons on the top-right of the page are 
assigned the name. DataAction, and their values are set to the names 


that appear on them. When you click on one of these buttons, another 
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Request object is created, parameters are given values, and the data is 
sent to the third file SurveyNumbersAction.asp. This can be viewed as an 
intermediary ASP application; which determines and processes your 
request. This file is also quite long - 725 lines - but includes the 
code required to tie the applications together. Clicking on any of the 
buttons in the SurveyNumbersForm.asp application takes you to the event 


handler shown in Figure 4.9. 


1: <% 

2: If Not IsEmpty(Request("DataAction")) Then 

3: strDataAction = Trim(Request("DataAction”)) 

4: Else 

>: Response.Redirect "SurveyNumbersForm.asp?FormMode=Edit" 


6: End If 


2 a ee 


10: Select Case strDataAction 

11: Case "List View" 

12: Response.Redirect "SurveyNumbersList.asp” 

13: Case "Cancel" . 
14: Response.Redirect "SurveyNumbersForm.asp?FormMode=Edit" 
15: Case "Filter" . 


16: Case "New" 

17: Case "Find" 

18: | Case "All Records" 
19: Case "Apply" 

20: Case "Insert" 

21: Case "Update" 

22: Case "Delete" 
23:End Select 

24: %> 


Figure 4.9. Processing application requests (Note: ".." 
| denotes omitted code). 





This excerpt from SurveyNumbersAction.asp first sets the variable 
strDataAction to the value that was set in the Request object. The Select 
structure starting on line 10 determines what button the user clicked, 
and executes code (omitted for clarity) that handles the given event. 


In the simplest case, i.e., we click the "List View" button to return to 
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the tabular representation, the client is redirected to the 


SurveyNumbersList.asp file (line 12). 


SurveyNumbersAction. asp SurveyNumbersList.asp 


Figure 4.10. ASP application interaction. 





As previously mentioned, we used Microsoft's Visual InterDev to 
develop these ASP applications. The files for the Survey2_DB database 
operate in the exact same manner as the files for the Num_List_DB 
database. Visual InterDev provided all the code that was required to 
navigate through recordsets and perform operations on the data source. 
While this software product made web~-driven database applications 
rudimentary to develop, we did encounter an application error when 
trying to generate the ASP files for the Survey2_DBdatabase. As a 
result, we were forced to manually edit code for this application. 
Doing so required a good understanding of how the ASP application 
worked. This problem is most likely due to the large Size of the 
Survey2_DBdatabase, as. we have not encountered a similar error when 
working with smaller, more manageable databases. 

One last point worth mentioning is that if the database schema is 
ever changed, then the ASP application will have to be regenerated and 
redeployed. The same limitation holds true for the Java™ applets and 
HTML/servlet interface. Creating new ASP applications to allow clients 
to input and retrieve data will be far easier than redoing the other 
ACSA components. For this reason, we highly encourage the reader to 
become familiar with how to use the Visual InterDev product. 


Reference 9 provides an outstanding discussion on this subject. 
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E. CONCLUDING REMARKS 


ADO is as easy to use and learn as ASP, and with a tool like 
Visual InterDev, you can build ASP applications in little time that 
allow you a great deal of flexibility. ADO is inexpensive (free), and 
like Sun Microsystem's "sunjdbc.odbc.JdbcOdbcDriver," allows you to 
communicate with ODBC data sources. While the JdbcOdbc driver fiom Sun 
Microsystems uses a non-standardized object model, ADO has a 
well-defined API. Another factor to consider when deciding which object 
model to use for database programming is that ADO enhancements will 
allow you to communicate with non-SQL data sources. JDBC™ does not 
offer this capability, nor are there any plans to expand its features 
to allow this. We have included Table 4.10, which lists the major JDBC™ 


objects and their ADO equivalents, for your reference. 


(Command 


CallableStatement Command 
ResultSet RecordSet | 


Table 4.10. JDBC™ Ep eChs and their ADO equivalents [Ref. 24). 
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V. ACSA SYSTEM DEVELOPMENT AND OPERATION 
A. INTRODUCTION 


This chapter contains a great deal of information that is_ 
pertinent to ACSA system users, administrators, and future project 
developers. It serves not only as a system user manual, but also as a 
guide through the development decisions the original authors made. You 
should read this chapter until you are familiar with its contents in 
their entirety. We will cover alot of ground here - from the design of 
the two ACSA databases and the use of the Microsoft Access upsizing 
utility, to how we used Microsoft's NT Server 4.0 and the company's 


BackOffice suite of products to support this project. 


B. DATABASE DESIGN 


The ACSA project uses two different SQL 6.5 databases. The 
Survey2_DB database contains client survey submissions, while the 
Num_List_DB is a utility database referenced by the servlets and applets 
to determine if the client is an authorized survey participant. Both 
databases were initially developed in Microsoft Access, and 
subsequently upsized to Microsoft's SQL 6.5 database format. Access is 
a powerful, easy-to-use Relational Database Management System (RDBMS), 
but it is limited in its application as a multi-tier database provider: 

As our research efforts progressed, we found a need for a more 
robust DBMS that could reliably respond to client requests. The two 
major products available at the time were Microsoft's and Sybase's SOL 
Server. We chose to work with the Microsoft product for a number of 
reasons, to include: 


e Microsoft provided a MSAccess add-in utility that allowed you 
to easily upsize to a SQL 6.5 database without losing the 
database schema or its contents. 


e The United States Navy had promulgated the IT-21 policy. This 
policy emphasized the need for developers to use Microsoft 
technology in their projects. 

Microsoft's SQL Server is part of Microsoft's BackOffice suite of 
applications designed to run exclusively on the Windows NT Server 
operating system. You can interact with any database by using 
Structured Query Language (SQL) syntax, which is what you have seen our 
programs do in the previous chapters. These programs can communicate 


with any database managed by SQL Server, i.e., think of SQL Server as a 
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container that holds many databases (the Survey2_DB and Num_List_DB are 
just two of the many that it manages). When a program sends a request 
to SQL Server, SQL Server takes that request, finds the database that 
the program wants to interact with, and then manages the interaction 
with that database and returning the information to the client (or 
program) that requested it. 

In order for us to communicate with SQL Server, there were a 
number of steps we had to take, to include properly upsizing the 
original databases (this process is described shortly), and using a 
driver from our Internet applications that was capable of taking the 
SOL calls we made and communicating with the SOL Server process running 
on the spitfire machine. We decided to use WebLogic's FastForward driver 
(see Chapter II for additional ieee econ on this product) for this 
purpose. 

Perhaps the best place to begin discussing how the system was 
designed is to look carefully at the schema (or design) of both 


databases. 


1. The Survey2_DB database schema: We designed a relational 
schema for the Survey2_DB database patterned after the existing 
survey form. This form contains both biographical information 
and survey questions that the participant must complete before 
the survey is submitted for further processing. The logical 
separation we made was to create two database tables - one 
that would hold the client's biographical information, and the 
other which would contain the respondent's selections to the 
61 survey questions. The attributes and data types for the 
Biographical_Data and Questions tables can be found in Tables 5.1 
and 5.2 below.. 

A composite primary key is used to uniquely identify each record 
in either table. This key is composed of three fields: community, 
Squadron_Number and Survey_Number. With this key, we can link the records 
in both tables together, and for any record, we can identify all 
information that the client submitted. It should be noted that at no 
time can the identity of the client be determined. The granularity of 
such an inquiry is limited to the squadron the submission was received 
from, and this information is only available to ACSA system 
administrators. If this implementation does not afford enough 
protection, squadrons can use an "Other" category to identify 


themselves. 
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Without some way of curtailing how many surveys a client can 
submit, it is possible that the survey sesules cari become skewed in 
such a manner that the whole survey process becomes analytically 
worthless. In order to preclude this possibility from occurring, the 
ACSA program administrator must authorize a block of unique survey 
numbers for each squadron (these numbers are found in the Num_List_DB 
database). These blocks of numbers should be randomly generated to 
prevent the possibility that one survey participant will guess what 


another squadron's block of valid survey numbers are. 


| «~‘FIELD  ~—|_~=sCDATA TYPE POSSIBLE VALUES 


Community text Primary key field - community. Possible values are HC, 
| HCS, HM, HMH, HMT, HS, HCS, HSL, VAQ, VAW, VF, 
VFA, VMAQ, VP, VQ, VR, VRC, VX, VT, VX, OTHER 


Flight_hours Number less than 25,000 
Namber less than fight hours enty 
Dept_ 






























Possible values are 0 to 3: 
0 = 01-03, 1 = 04-06, 2 = E1-E5, 3 = E6-E9 
Possible values are 0 to 2: 
0 = Pilot, 1 = NFO, 2 = Aircrew 







Either VES or NO 
Either Regular, Active Reserve or Drilling Reserve 


Service text Possible values are 0 to 2: 
} 0 = USN, 1 = USMC, 2 = Other 
Either East Coast, West Coast or Other 


Table 5.1. Survey2_DB Biographical_Data table schema. 


- Community text Primary key field - community. Possible values are HC, 
: HCS, HM, HMH, HMT, HS, HCS, HSL, VAQ, VAW, VF, 
"Survey number | number | Primary key field authorized survey submission number 
7 = Strongly Agree 


Question 1... 61 Array index value: 
8 = NOT APPLICABLE 


0 = Select a Question 
Table 5.2. Survey2_DB Questions table schema. 













1 = Strongly Disagree 

2 = Moderately Disagree 
3 = Slightly Disagree 
4=NEUTRAL 

5 = Slightly Agree 

6 = Moderately Agree 


2. The Num_List_DB database schema: Before a client can submit a 
completed survey to the database, they must be assigned a 
unique survey number. This Survey number is one of a block of 
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numbers that the administrator has assigned to the squadron in 
the Num_List_DB. This is, to a large part, the only _ 
administrative overhead that must be incurred before the 
survey can be appropriately administered to fleet squadrons. 
It is important that these authorization numbers are passed 
only to the local squadron ACSA survey facilitators. The 
schema for this Num_List_DB database is shown in Table 5.3. 


Primary key, individual squadron number 


Start_Number Number First number in a series of authorized survey submission 
numbers 

End_Number Number Last number in a series of authorized survey submission 
numbers 


Table 5.3. The Num_List_DB table schema. 










Other database design considerations that future developers 


should be aware of include the following: 


e If the ACSA program administrator decides to change the 
wording of questions, the code for all project components will 
need to be modified. This could have been precluded if the 
questions were imported from an external file (such as a text 
file), so future developers should seriously consider 3 
separating the questions from the ACSA programs. A change in 
the way a question is worded does not impact the SQL 6.5 
databases. : : 


e If the number of questions change, developers will have to 
modify the back-end SQL 6.5 Survey2_DBschema, as well as the 
ACSA program code. Although this may be a somewhat tedious | 
task, it should not be too time-consuming of a process to 
complete. The difficult part will be if the number of 
questions expands beyond the current 61, but we do not 
anticipate this happening. 


e Adding, deleting, or renaming selections for currently 
existing fields should be neither difficult nor time-consuming 
to do. Upon the conclusion of the first usability testing, we 
made several changes to the rank field of the HTML, ASP, and 
applet front-ends that took less than ten minutes to complete. 
We did not have to modify the SOL 6.5 databases. 

Clients who are survey participants can query the contents of the 
Survey2_DB database but cannot directly perform UPDATE or DELETE 
operations. Once records are entered into the database, the ACSA 

“program administrator, who retains full control over the database, is 

the only person that can change them. If changes need to be made, the 
ACSA administrator can make them from the portion of the web site that 
allows administrative access, or by going to the spitfiremachine and 


directly accessing the data through the MS Access front-end. 
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A final requirement that we had to satisfy was protecting the 
haneles of the individual squadron. This was important for our 
development of the Results applet, because we did not want Commanding 
Officers to be able to continuously monitor the results for their 
squadrons, or to compare their squadron's results to others. Therefore, 
the granularity of queries is limited to a particular community. We 
recognize that feedback is an important element of any survey process, 
and so it was decided that Commanding Officers would be able to obtain 
their squadron results, but only through separate communication to the 
ACSA program administrator requesting this information. Future upgrades 
to the ACSA project could include automating the process whereby 
Commanding Officers can receive results for their squadrons instantly. 

Database disk storage requirements should be minimal. Based on 
previous surveys, we estimate a less than 3MB storage requirement for 
each annual survey but have allocated 50MB of disk space fo: Gomforvab Ly 
accommodate up to 16 annual surveys: This container can be resized at 


any time by using the SQL Enterprise Manager application. 


C. THE SQL SERVER 6.5 DBMS 


Since the two databases were initially designed in Microsoft 
Access, we needed some convenient means of transferring the schema and 
current data to SQL 6.5 format. If no such utility existed, we would 
have to recreate the tables in each database from scratch, and we would 
have to manually input new data to continue testing the prototype | 
system. Fortunately, Microsoft provided an Access upsizing utility add- 
in, which could automatically take your Access database and port it 
over so you could use it with SOL 6.5. Meanwhile, you could use Access 
as a front-end to view the upsized SQL 6.5 database or you could use 
another add-in that was installed at the same time the original 
upsizing tool was added. This utility, the SQL-Server Browser, can be 
selected by going to Tools->Add-Ins from the MSAccess menu. 

Figure 5.1 shows what happens when you open the Survey2_DB in 
Access. The SQL Server tables are represented with a small arrow and 
globe icons preceding the table name. The upsizing utility 
automatically creates these new SQL Server tables, either with or 
without the associated table data. Additionally, the previous Access 
tables are renamed by appending a _locallabel to the end of the table 


name. Program administrators should be very careful when using this 
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interface to change the contents of the Survey2_DB. If you want to 
change the actively used ACSA databases, ensure that you are using the 
SQL 6.5 tables denoted with the arrow and globe icons. Changes to the 


Access tables will have no impact on the ACSA project. 


osoft Access 


Biographical Dats fecal 


Questions_local 





Figure 5.1. SQL 6.5 Survey2_DB database tables as seen from 
MSAccess. , 

The SQL Enterprise Manager application is the main interface 
between SOL server and the databases it nidnages. You can find this 
application by selecting Start-> Programs-> Microsoft SQL Server 6.5-> SQL 
Enterprise Manager. The Enterprise Manager is used to manage and configure 
SQL servers, monitor server activity, create database devices, and 
creating new databases. A representative view of what the Enterprise 
Manager shows you is illustrated in Figure 5.2. In the remainder of 
this section, we will briefly discuss the ACSA components that can be 


found in the Enterprise Manager on the spitfire computer. 
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Figure 5.2. The spitfire Enterprise Manager window. 


Things to take note of from Figure 5.2 are: 


e The traffic light icon is currently green, indicating that the 
server is up and running. You can use the SQL Service Manager 
program (select Start->Programs->Microsoft SQL Server 6.5->SQL Service 
Manager) to pause, stop, restart, or resume the SQL Server 
service. You can likewise accomplish the same thing by right 
clicking on the icon and selecting the appropriate option. If 
clients notice problems trying to submit their surveys, you 
may want to stop and restart the SQL Server service. 
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e Under the Database Devices folder, you will notice several 
devices. These are essentially containers that are setup prior 
to the actual database to indicate how much storage space 
should be used for data and log files. Only the Num_List_Device 
and Survey2_ Device are ACSA program devices. : | 


e The Databases folder contains the actual databases used by a 
device. As you can see, there has to be an association between 
a device and a database, and this association is maintained, 
managed, and monitored by the SQL Server application. 


e In the Objects folder of each database, you will find a list of 
tables, views, stored procedures, rules, defaults, and user- 
defined datatypes. Opening the Tables folder of the Survey2_DB 
database reveals the tables you might expect to find there - 
Biographical_Data and Questions. From Enterprise Manager, you can 
only access the table schema and not the actual table data. 

In order to understand how a database device is properly created, 

let us take some time to review this process. 

Before upsizing, you need to create a SQL Server database device to 
hold the database. This database device is a container that has a space 
reserved for data and for logging interactions with the database. To 
create a database device from the Enterprise Manager, you can either 
right click the Database Devices folder or select Manager-> Database Devices- 
> New Device from the menu. This will open a dialog box and prompt you for 
the information necessary for creating a new device. The Survey2_DB 


database device was created with the settings listed in Table 5.4. 


Table 5.4. Survey2_DB database device settings. 













D. UPSIZING THE SURVEY2 DB ACCESS DATABASE TO SQL SERVER 


The upsizing utility is an Access add-in program developed after 
the release of Access 97. This freeware utility can be downloaded from 
Microsoft’s web site at [http:/(www.microsoft.com/]. This section will lead 
the reader through the step-by-step process that we used to upsize our 
Access Survey2_DB database to SQL Server. If you would like additional 
information, we recommend taking a look at the Platinum Edition Using 
Access 97 by Roger Jennings [Ref. 25]. | | 

Prior to installing the upsizing utility, ensure that MSAccess is 


not running. After you have successfully run the upsizing utility 


82 








program (AUT97.exe), open your .mdb Access database and select 
Tools->Add-ins->Upsize to SQL-Server. This selection will initiate the 
upsizing wizard that is designed to guide users through the upsizing 
process. Since we are upsizing an existing database, Survey2_DB, select. 
the radio button Use existing database, then click Next. Make the following 
selections: | | 


e Select the Machine Data Source tab, and then click New. 
e Select System Data Source (Applies to this machine only) then click Next. 


e Highlight SOL Server, and then click Finish. 


This action will bring you to the first of five screens for 
creating a new SQL Server data source. At each screen, we made our 
selections as follows: 


e Wizard Screen 1: We entered Survey2_DB as the data source name, 
our data source description (optional) and then select local 
server, then Next. : 


e Wizard Screen 2: Select With Windows NT authentication using the 
network login ID and Connect to SQL Server to obtain default settings for the 
additional configuration options check box, then Next. 


e Wizard Screen 3: Enter Survey2_DBin Change the default database to 
text box. Then select Create temporary stored procedures for prepared 
SQL statements and drop the stored procedures check box, select Only 
when you disconnect, Use ANSI quoted identifiers, and Use ANSI nulls, 

‘padding, and warnings check boxes, then Next. | 


e Wizard Screen 4: Select Let SQL Server ODBC driver choose the 
translation method, then Next. 


e Wizard Screen 5: select finish. 


E. WEB SERVERS 


In order to serve files to web clients {browsers), you need a 
network application that can intelligently interpret and fulfill client 
requests. The application that performs this service is called a web 
server. Web servers are background processes. that run transparently to 
system users. This means that if you are working on a computer that has 
a web server installed and running, you do not have to wait for the 
server to complete before executing additional tasks or applications 
(i.e., the web server does not impact how you go about your other 


business). This ability - to run multiple processes simultaneously on a 
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Single computer - is known as multitasking, a feature of modern 
computer architecture that greatly enhances the utility and 
functionality of computer systems. 

Without multitasking, web servers and many other present-day 
applications would be extremely burdensome to use. For instance, web 
servers could only process one client request at a time and input and 
output (I/O) operations (such as writing to a log file) would seriously 
degrade application performance. Multitasking introduced the concept of 
‘multithreading, which is the ability of a program to have multiple 
parts that are executing simultaneously. Web servers could then divide 
labor into modules, starting a new thread for each client requests and 
other threads for input and output operations. By breaking the 
application into multiple parts that can execute in parallel, the 
operating system can rapidly switch between these threads and divide 
processor time between them. In this manner, web servers become more 
responsive, run smoother, and clients' requests aren't left sitting in 
a long queue for processing. | 

Whatever web server you decide to use, it should be built in such 
a way that it takes advantage of the benefits offered by 
multithreading: We experimented with several freeware web servers, to 
include Apache, OmniHTTPd, ServerSeven, and Internet Information Server 
(7S) 4.0. While all of these products were able to handle multiple, 
simultaneous client requests in an efficient manner, the former three 
could not take advantage of the Windows NT Security Accounts Manager 
(SAM) database, process Active Server Pages (ASP), or serve files that 
had a "S" in them. This last restriction posed a serious problem when 
the client requested any of the Java™ applets, because many of the 
compiled class files that were part of the applet had "$"'s in them. 

For these reasons, we decided to use and experiment with 
Microsoft's IIS. How we configured IIS for the ACSA project is the 
subject of this chapter. By the time we are done exploring this 
subject, the reader should have a good understanding of how IIS is 
configured, what components work in conjunction with IIS and how they 
are used, how to take advantage of Windows NT security features, and 
knowledge of good security practices that can make web sites more 


secure (not invulnerable) from unwanted intruders. 
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EF. WINDOWS NT 4.0 SECURITY 


IIS is tightly integrated with Windows NT and can take advantage of the 
security features native to an NT machine. But before we examine how 
TIS security features are enabled, it is important that we review how 
NT security works in general, particularly if this is the first time 
that you have been exposed to the NT operating system. 

Everything done in NT revolves around the use of what is known as 
a "user account.” When you first log on to an NT machine, you are | 
presented with a splash screen that asks for your username and 
password. After you enter this information, the WINLOGON process (a 
program running on the NT machine) accesses the Security Accounts 
Manager (SAM) database and determines whether the information supplied 
is valid (note that the NETLOGON process is responsible for this task 
when shares are created and network users want to access these shares). 

You should remember that supplying a username and password alone 
does not confirm whether the user is legitimate or not. It could be 
that both the username and password were compromised and are now being 
used by someone who is not authorized access to the system. To ensure 
that users are indeed legitimate, if this is a stringent requirement 
that you want to impose on system users, you should use a supplementary 
biometric device such as a fingerprint scanner. 

‘If the username and password correspond to an entry in the SAM, 
then a security token is generated. This token is a "key" that will 
either allow or disallow the user access to portions of the system that 
reside on a New Technology File System (NIFS) partition. NTFS is a 
special file system used by NT that uses Access Control Lists (ACLs) to 
enumerate what users or groups have access to files and directories, 
and what their rights are to these objects. | 

File system security is lost without NTFS. In fact, if you 
install the NT operating system on a File Allocation Table (FAT) 
partition, you will notice that when you look at the properties of a 
file or directory in a utility such as Windows NT Explorer, you don't 
have the ability to set security permissions. Hence, if you have a 
requirement to set file-level permissions, you should install NT on an 
NTFS partition. You can always change a FAT partition to a NTFS 
partition (but not vice versa) by using the dos CONVERT utility. For 
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more information on how this program works, type "convert/?" at the dos 
command prompt. 

So you might be wondering how user accounts and file system 
security are related. An example will best illustrate how accounts are 
created, managed, and the relationship between accounts and file system 
security. First, let's look at the User Manager for Domains. | 

This administrative tool (shown in Figure 5.3) is one of several 
provided by the Windows NT operating system. It gives users with 
administrative privileges the ability to manage the permissions of user 
and group accounts. | | 

If you look at Figure 5.3, you will see that we have eleven 
accounts on our machine: Administrator, Commander, DocC, dont, Guest, 
IUSR_SPITFIRE, I[WAM_SPITFIRE, jsheld, mingo, Replicant, and 
SQOLExecuteCmdExec. The first two accounts are created by default 
whenever you install Windows NT. The Administrator account is the one you 
will use when you want to log on with administrator privileges. Since. 
everyone who installs Windows NT knows that this account exists, it is 
highly recommended that you rename the account to something less 
obvious and use a password that is hard to guess. You can rename the 
account by clicking once on it and then selecting Rename from the User 
menu of the User Manager for Domains program. To change a password, 
double-click on the account and enter the password twice where 
prompted. | 

The Guest account has no password and is used to provide guest 
access to the computer, the domain, and the resources that are being 
shared. If Local Area Network (LAN) users do not explicitly have an 
account listed in the User Manager for Domains, then they log onto the 
machine with the permissions granted to the Guest account. Leaving this 
account enabled is extremely dangerous, because it allows anyone access 
to your system. Since all newly created shares give full control 
permission to everyone, including guests, security can quickly become a 
problem. For this reason, we highly recommend disabling this account | 
(which was done on the spitfire machine hosting the ACSA project). Lf 
users still require access to domain shares, you should create an 
account for them using User Manager for Domains. 

When you click twice on the Guestaccount, you open a window 


identical to that shown in Figure 5.4. This menu allows you to set many 
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user account properties, such as the groups that the user is a member 
of, what hours they can log on, if they are allowed to change their 


password, etc... 


Descriptio 


altar arcennt tar acirrinestenng the carriputendcrnasin 


Builtin account for guest access to the computer/domain 
IntermetGuestAccount internet Server Anonymous Access 
Web Application Manager |ntemet Server Web Application Manager identity 


fy 


i Administrators Members can fully administer the computer/domain 
Backup Operators Members can bypass file security to back up files 
Guests Users granted guest access to the computer/domain 

:\g&t MTS Trusted Impersonato Microsoft Transaction Server trusted process identities. 
Members can share directories and printers 
Supports file replication in a domain 


Ordinary users 





Figure 5.3. User Manager for Domains. 


The accounts Commander, DocC, dont, jJsheld, mingo, and Replicant are 
also user accounts. But what happens when a process wants its own 
account? As you might have already guessed, a process can also be 
associated with a user account. This is the case with IIS and SQL 
Server 6.5. IIS uses the account JUSR_<MACHINE NAME>, where the machine 
name is computer name specified in the identification tab of the 
control panel network applet, as the Internet guest account. 
IUSR_SPITFIRE is the Internet guest account in this example and is 
created, along with IWAM_SPITFIRE account when IIS is installed. 

The IJUSR_SPITFIRE account is accessed whenever a web client sends 
a request to your IIS web server. When this occurs, the client connects 
to your machine with the permissions granted to the IUSR_SPITFIRE | 
account. Similarly, SQL Server 6.5 uses the SQOLExecutiveCmdExec account 
when a client sends DBMS requests. You should NEVER DELETE these 
accounts. You should also know that you CAN NEVER RECREATE an account, 
even if you give the account the same access permissions as the 
original one. This is because each account has a Security IDentifier 


(SID) which is unique and never repeated. 
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Figure 5.4. Changing user account properties. 

When the number of domain neers is small, managing permissions 
through user accounts is easily done. But suppose we have 1,000 users. 
We could then potentially find ourselves, as administrators, 
spending most of our time changing file or directory-level permissions. 
To circumvent this problem, NT provides groups. an groups help 
administer security permissions is clearly seen if you think of large 
corporation that has many departments. As an administrator, we might 
create a group for each department —- one for MARKETING, FINANCE, SALES, 
RESEARCH AND DEVELOPMENT, etc... Bach group, in turn, has a list of 
users that are members of that group. In this manner, we can set 
permissions based on groups rather than individual users. If a user 
doesn't have access to a resource that he needs, you can either add him 
to a group that does have access, or explicitly allow that user access. 
Group management eases.the administrative burden of applying security 
permissions. 

The ACSA project has only one group - Survey Participants. The users 


dont, DocC, and Commander are members of. This group has permission to 


submit a survey using either the HTML form or the Java™ applet. It is 
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far easier to set directory permissions by group rather than by 
account, and you should realize that granting Survey Participants full 
aGaEeot access to a directory's contents is in effect the same thing as 
granting the individual users dont, DocC and Commander full control. 

With this setup, everyone can submit data to the Survey2_DB : 
database managed by SQL Server. But we want to impose a meee asa on 
who can view the data that has been submitted. The Results applet is the 
mechanism — to query and view database results, so we restrict 
access. to the eivectary that ee the code for the Results applet to 
the eee and DocC accounts. This means that clients who log on 
using the dont account will not be able to access this portion of the 
web site. Setting permissions on directories can be done either in IIS 
or cnesuen Windows NT eetioren: 

‘In Peieter, stew left click on the directory, which will 
highlight it, then right click and select Properties. You should see a 
dialog box that has four tabs: General, Web Sharing, Sharing, and Security. 
If you move to the Security tab, and select Permissions, you should then 


see a Directory Permissions dialog box similar to Figure 5.5. 
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Figure 5.5. Using Windows NT Explorer to set directory permissions. 


The permissions for the ImetPub directory in this example are set 


to Everyonewith Full Control. If subdirectories have a more restrictive 


set of controls, then Windows NT imposes the more restrictive set of 


rules. For example, suppose that the HTML form is located in a 


subdirectory called Survey. If access to this subdirectory is restricted 


to Survey Participants and the Everyone access is removed, then it doesn't 


matter that everyone has access to the InetPubdirectory. Only Survey 


Participants have access to the Survey subdirectory, and Windows NT. 


verifies that the current client belongs to that group. Table 5.5 


details the file system permissions 
From Figure 5.5, it should be 
groups to the directory permissions 


they have. You should be aware that 


available in NTFS volumes. 
apparent that you can add users or 
and specify what type of access 


directory permissions are different 


from share permissions, and when you create a share, by default 


everyone is given full control permission. 
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EFFECT 


Prevents any access to the directory and its files 
even if the user has been granted share or file level 
tulle COnerol 

Viewing, browsing directory, without access to files 
unless overridden by other file or directory 


permissions. 
Opening files and executing applications 


Adding files and subdirectories without read access. 
Add and read permissions, plus delete. 


Change plus taking ownership and assigning 
permissions. | 


Table 5.5. Directory permissions [Ref. 26]. 





To identify the shared directories on spitfire, simply look in 
Windows NT Explorer for a blue hand icon underneath a directory name. 
Notice in Figure 5.6 that the C, D, E, F, and G drives as well as the 
InetPub and Winnt directories are shares. To view the share permissions, 
you can again use Windows NT Explorer, right click on the IntetPub 
directory, then select the Share Permissions tab. In general, you should 


note the following about permissions: 


e Share permissions should not be changed. You can restrict 
access through file or directory level permissions that are 
more restrictive and will override the full control access 
that everyone has to the share. 


e Notice in Figure 5.5 that you have the option to replace 
permissions on subdirectories. You should refrain from doing 
this because it will remove any previously imposed 
restrictions that you have in place. By replacing permissions 
on existing files, you are not changing the permissions of 
subdirectories or the files contained within them. 
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Figure 5.6. The InetPub share as viewed in Windows NT. Explorer. 


[PERMISSION | —Ss=s—~—™—CCCCCCEFECT.OOSOC~“—~SCS 
No Access Prevents access to the shared directory regardless of 
other allowed permissions. | 
Read Allows viewing of contained files and directories, 
— 4 loading of files, and executing of software. 
Change All Read permissions plus creating, deleting, and 
changing contained directories and files. 

Full Control All Change permissions plus changing file system 
eee a ee 


Table 5.6. Share permissions [From Ref 1]. 






















G. INTERNET INFORMATION SERVER (IIS) 


IIS 4.0 is the latest version of Microsoft's web and File 
Transfer Protocol (FTP) server for the Windows NT Server 4.0 network 
operating system. It is an Internet standards-compliant Hypertext 
Transfer Protocol (HTTP) server that includes several other additional 
components which are used by the ACSA web site. In this section, we 
will explain the IIS installation process (to include where to get IIS 
and what components are included with the product), how to use the 
Microsoft Management Console and the HTML interface to administer the 
web site, how to examine server-generated log files, and how to 


implement security and authentication using IIS. 


92 








as Installation 


IIS is included as part of the Windows NT 4.0 Option Pack and is 


available for download from the Microsoft web site at 
[ http://www .microsoft.com/windows/downloads/contents/updates/nt4optpk/default.asp ] 


Before you begin downloading files, you should ensure that your 
system meets the minimum requirements for IIS installation. The minimum 


system requirements, as noted by Microsoft, are as follows: 


1. For Intel and compatible systems: 
e Pentium 66 MHz or higher; Pentium 90 MHz recommended 
e 32 MB of memory (RAM) ; 64 MB recommended 


e 200 MB of available hard-disk space 
2. For Reduced Instruction Set (RISC) - based systems: 
e System with Alpha processor 
e 48 MB of memory (RAM); 64 MB recommended 
® 200 MB of available hard~disk space 


3. CD-ROM drive 


4, VGA, Super VGA, or video graphics adapter compatible with Windows 
NT Server 4.0 . : 


5. Microsoft Mouse or compatible pointing device 
6. Service Pack 3. 


Before you can download the Option Pack, you must register with 
Microsoft. The registration process establishes an account that you 
supply with a username and password. Microsoft sends a cookie to your 
computer to retain this information, so that any time you come back to 
their site, you can download other products without having to re- 
register. After registering, you will be redirected to the Windows NT 
Option Pack 4 download area. The Option Pack is almost 87MB in size, so 
you should ensure that you have a fast connection (such as a Tl line) 
before downloading the files. Beware! As you might expect, downloading 
the files over a 28.8 connection would take a great deal of time - 
almost 7 hours - and although a 56.6K connection is better, it still 


requires three-and-a-half hours of uninterrupted downloading. 
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The registration process will guide you to a list of several FTP 
sites you can choose from to obtain the files. Due to its Size, the | 
Option Pack cannot be downloaded in one bulk file. Rather, you must 
save 52 different files to disk and then run the program install.exeto 
begin the installation process. As you can imagine, this is a very 


tedious, timely process that can be avoided in three ways: 


a) You purchase the Windows NT Server 4.0 Enterprise BAEtLOn, 
which includes the Option Pack. 


b) You call Microsoft and pay them a tidy sum to receive the 
Option Pack on a CD. | 


c) You get a Microsoft Developer Network (MSDN) subscription, 
which includes all Microsoft operating systems, their 
BackOffice products, service packs, option packs, etc... 


When you start installing the Option Pack, you will get a splash 


Screen as shown in Figure 5.7. 
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_ Internet Information Server 
<. Transaction Server 
Index Server 
Certificate Server 
‘Data Access Components 
Site Server Express 
Message Queue Server 
Internet Connection Services for RAS 
Administration 
Development Components 





Figure 5.7. The Windows NT 4.0 Option Pack setup splash screen. 


The installation wizard is self-explanatory and will guide you through 
several steps prompting you for information. If you accept the default 
settings,. it will install the IIS WWW server and a FTP server to your 


computer. You can choose to add or remove additional components (see 
Figure 5.8) at a later time by going to Start -> Programs -> Windows NT 
4.0 Option Pack -> Windows NT 4.0 Option Pack Setup -> Add/Remove. 
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Figure 5.8. Running the Windows NT 4.0 Option Pack after it was already 
installed. 


2. NT Option Pack Components | 


IIS is distributed as part of the Windows NT 4.0 Option Pack. The 
Option Pack includes seven distinct software components, which are : 
included in the list of features shown in Figure 5.7. We will briefly 
describe several of these components, and the most important ones that 


are related to web-site development are listed below for your 


reference: 


e Internet Information Server (IIS) is Microsoft's robust, scalable web 
server for the Windows NT Server platform. With IIS, you can | : 
share documents and information across the Internet or an 
Intranet. Because it is integrated with Windows NT directory 
services, it offers a more secure means of publishing 
information and making it globally available. 


e Certificate Server provides customizable services for issuing and | 
managing certificates used in software security systems 
employing public-key cryptography. It performs a central role 

. ain the management of software security systems to enable 
secure communications across the Internet, corporate 
Intranets, and other nonsecure networks. You can use : 
Certificate Server to generate certificates in standard X.509 
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format. This then allows you to authenticate servers and 
clients performing secure communications using the Secure 
Sockets Layer (SSL) protocol [Ref. 27]. The ACSA project uses 
certificates and the SSL protocol in combination with ASP 
technology to enable secure survey submissions. 


e Site Server Express 2.0 allows web-site administrators the ability 
to perform extensive web-site analysis. You can determine how 
a web site is constructed and analyze the contents of your web 
pages, or you can generate over twenty pre-defined reports 
that perform statistical analysis of the IIS log files. We 
will go into more detail on the use and features of this 
component later in this chapter... | 


e Index Server allows you to perform full-text searches and 
retrieve all types of information from your web site. Clients 
can search your site, and Index Server will return hyperlink 
matches that enable clients to jump to the information they 
are interested in viewing. 


e Transaction Server 2.0 creates a software environment in which any 
kind of transaction - an information transfer, a financial 
transaction, a database update, or any kind of activity that 
involves important or sensitive data - is guaranteed either to 
complete successfully or leave the data completely unchanged 
[Ref. 28]. Transaction Server is primarily used for 
distributed applications that adhere to Microsoft's Component 
Object -Model (COM). Although the ACSA project is not a 
distributed application, future work may involve building it 
as such and taking advantage of this component to manage the 
application's database transactions. 

Of course, no web site is complete without other services, and 
the NT Option Pack provides a rich array of supplementary services, to 
include FTP and the Network News Transport Protocol (NNTP). 

The FTP service allows you to configure your computer as a file 
server, which means users (both those that have an account on your 
system and those who don't) can post and retrieve files. You should 
install and use FTP only if your users really need it, and even then, 
they should demonstrate a genuine need for the service. If FTP is 
installed, you should be extremely careful configuring it, and it is 
highly recommended that you disallow anonymous access. Additionally, 
remain cognizant of what files are being posted, as it could be the 
case that a malicious program has found its way into your system. We 


did install the FTP service on the spitfire computer for one reason: 


e To afford us the capability to download documents from home. 
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As thesis documentation was completed or updated, it was placed: 
in the D:\Inetpub\ ftproot directory. From home, the developers were able to 
use a dial-in connection to gain access to the FTP service and download 
these files, or upload new ones. Because the Naval Post Graduate School 
has a firewall, outside access to ports that services use is only 
granted if the ports are explicitly listed as allowing access. The FTP 
service operates on port 21, and outside access to the FIP service is 
denied by the Naval Post Graduate School (NPS) firewall. To alleviate 
any concerns that the project sponsor may have, it is our intention at 
the conclusion. of prototype development to stop the FTP service. 

The NNTP service is Similar to USENET newsgroups, but differs 
from them in the sense that IIS NNTP newsgroups are private online 


discussion forums. The ACSA project has three such newsgroups, as shown 


in Figure 5.9. 


©) survey.generalhelp 
©) survey.technicalproblems 





Figure 5.9. ACSA newsgroups. 


You can post and read newsgroup messages. The purpose of 
newsgroups is to disseminate information to a wide audience that shares 
a common interest in the subject matter of that group. But newsgroups | 
can also be used for administrative purposes. For example, suppose it 


was necessary to stop the IIS web server for maintenance. The system 


administrator could first post a message to the survey.announcements 
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group indicating that the spitfire.avsafety.nps.navy.mil web site would be 
unavailable, then shut down the web site but still provide newsgroup 
service to survey participants. The ability to run services independent 
of each other allows you various means of communicating with your 
clients. Newsgroups are located in subdirectories of the 
D:\Inetpub\nntpfile\root directory. More detail on how to configure the NNTP 
service and how to use your mail program to access the newsgroups will 
be explored later. 

3. The IIS Web Service 


The general idea of what a web server does and how it operates 
was explained at the beginning of this chapter. IIS offers two means of 


administering a web site: 


a) You can use an HTML interface, known as HTMLA (or the HTML 
Administrator) to configure web server settings. 


b) You can use the Microsoft Management Console (MMC), which 
provides what are known as "snap-ins" that can be used to 
configure your server and its services. Microsoft intends to 
make MMC the server configuration "nerve-center," and future 
releases of Windows NT (which will be part of the Windows 2000 
product line), will incorporate the MMC concept. 

To start the HTMLinterface, go to Start -> Programs -> Windows NT 

4.0 Option Pack -> Microsoft Internet Information Server -> Internet Service Manager 
(HTML). Your browser will open a page similar to the one shown in Figure 


patO.. 
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Figure 5.10. 11S HTML administration interface. 


You should take note of the Uniform Resource Locator (URL) 
displayed in the Address field of the browser window: 
[http://localhost:3208/iisadmin/iis.asp } . Localhost indicates that you are opening the 
page from the computer "local" to the location where IIS is installed. 
The number 3028 is the port on which the administrator service runs. 
fisadmin is a virtual directory that is located separately from all your 
publicly accessible web documents. How to create a virtual directory 
using IIS beyond the scope of this chapter, suffice to say that you can 
find the IIS administrator pages located in the subdirectory _ 
D:\WINNT\system32\inetsru\iisadmin. The contents of this directory are 
listed in Table 5.7. 
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Volume in drive D has no label. 


Volume Serial Number is DOQOQE-BAOZ 


Directory of D:\WINNT\system32\inetsrv\iisadmin 


Be 
default.asp 
liabout.asp 
liacssls.asp 
liadmhd.asp 
liamapls.asp 
iiauth.asp 
iibkupls.asp 
licache.asp 
lidef.asp 
lierrls.asp 
iifixpth.inc 
iifvd.asp 
iifvdrd.asp 
iihdn.asp 
iilist.asp 
iimime.asp 
iimitihd.asp 
Lipath.asp 
lipop.asp 
iipoptl.asp 
iirte.asp 
iiscript.asp 
iisess.asp 
iisnew.asp 
1itool.asp 
livdnt.asp 
[images] 
[jsbrowser] 


[..] 
default.htm 
iiaccess.asp 
jiaction.asp 
iiadmls.asp 
liapp.asp 
Tibind ane 
libkupset.asp 
iichkpath.asp 


iidoc.asp 


iifilt.asp 
iifmsg.asp 
iifvddir.asp 
iifvs.asp 
iihdr.asp — 
iilog.asp 
limimehd.asp 
iimltils.asp 
iipathhd.asp 
iipopcl.asp 
liput.asp 
iirtehd.asp 
iisec.asp 
iiset.asp 
iisrvls.asp 
livd.asp 
iivdrd.asp 
[isadmin]: 


111 File(s) 


blank. htm 
files: 
iiacct.asp 
iiadm.asp 
iiamap.asp 
liapphd.asp 
iibkup.asp 
iibkuptl.asp 
ilicomm.asp 
lierr.asp 
iifilthd.asp 
lifnav.asp 
1ifvdhd.asp 
iigtdata.asp 
iihdrhd.asp 
iiloghd.asp 
iimimels.asp 
iimnu.asp 
iipathls.asp 
iipopcl.htm 
iiputls.asp 
iirtels.asp 
iisechd.asp 
iiset.inc 
iistat.asp 
iivddir.asp 
iivs.asp 


452,639 bytes 





calendar.asp 
[htmldocs ] 
iiacsshd.asp 
liadmbd.asp 
iiamaphd.asp 
liappmn.asp 
iibkuphd.asp 
libody.asp 
i1icomp.asp 
iierrhd.asp 
1ifiltls.asp 
iiftp.asp 
Lifvdnt.asp 
iihd.asp 
iihdrls.asp 
iilogmn.asp 
limlti.asp 
linav.asp 
iiperf.asp 
iipophd.asp 
iirename.asp 
iis.asp 
iisecls.asp 
iislider.asp 
LitO.ane: . 
Livdhd.asp 
iiwww.asp 





973,870,080 bytes free : 
Table 5.7. IIS HTML administration files located in the virtual 


directory HSAdmin. 


If you explicitly try to administer the web site from a remote 


location using the URL [http://spitfire.avsafety.nps.navy.mil:3208/iisadmin/iis.asp} , you 


will receive an error message indicating that access to the HTMLA is 


restricted to the localhost. The 403.6 forbidden message (see Figure 


5.10) provides detailed instructions on how the system administrator 


can enable remote access to the HTMLA. The only time this feature 


should be enabled is when the system administrator is going to be 


offsite for an extended period of time and has a need to remotely 


administer a web site served by IIS. 
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HITP Error 403 - Access to Internet Service Manager 
(HTML) is restricted to Localhost 


403.6 Forbidden: IP address rejected 


As a security precaution, Setup restricts Internet Service Manager 
(HTML) to allow access only from the server computer itself 
(Localhost, IP address 127.0.0.1). | 


To enable remote use of Internet Service Manager (HTML) to 
administer this server, 20 to the server and use Internet Service 
Manager to update the IP address restrictions for the Web site 
ISADMIN: 


Use the start menu to open Internet Service Manager 
Expand the Web Site you are connecting to 

Select the TSADMIN Virtual Directory 

Right mouse click and select properhes 

Select the directory security tab 

Edit the IP address and domain name restrictions 





Figure 5.11. Trying to access HTMLA from a remote computer. 


If you expand the Default Web Site shown in Figure 5.10, IIS will 
proceed to load your web site's virtual directory information, and the 
directory structure of everything located below D:\Inetpub\wwwroot. This 
takes several seconds, and once IIS is ready, you should end up with a 
view of your web site similar to Figure 5.11. As you peruse the 
contents of the site, take some time to look at the left side of the 
Internet Service Manager. Here, you will find the commands New, Delete, 
Rename, and Properties, which allow you to create or delete web sites (an 
IIS web server can host multiple web sites), rename them, or look at 
their properties. Because the ACSA project is the only web site hosted 
on the spitfire server, we will avoid discussing how to use these IIS 


features. Do notice, however, that from here the administrator can Start, 


102 











Stop, Pause, and Resume the web service, examine web service properties 
and change them by using the Master Propertieslink, or backup an entire 
web site. | | 

It is fairly obvious that IIS provides an extensive set of 
features that can be used to create very complex sites. Fortunately, 
administering an IIS web site with the HTMLA is straightforward, and 
Microsoft provides extensive browser-viewable documentation (for IIS 
and the other Option Pack components) which you can access at 
[http:/localhost/iishelp/iis/misc/].. When you attempt to access this documentation, 
“IIS will query you for a username and password, which should correspond 


to one of the accounts listed in the User Manager for Domains. 


~ 


# <j Microsoft Internet Service Manager - Microsoft Internet Explorer 


re Pars 
dpaneraees lekeccahepammeed 


\ddress 1@ ] hitp: localhost 3208/iisadmin/is. asp 


| Internet Information Server 


Tisktcldsiae 1-€3) Default FTP Site 
+ Service El Detaut Web Site 
manager , 3B USSAMPLES 

eo ISH 


; 


vs 


Rename 


Properties 


Start 


Stop 
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@ 
G 
} 
© 
oO 
@ 
© 


servietrunner 
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sounds 





Figure 5.12. An expanded view of the default web site's directories. 
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As with anything else, experimenting with the HTMLA will not only 
gain you familiarity with the tool, but also make you an expert on how 
to run your web site and what you can do with IIS. From here, let's 
click on the Master Properties link. Notice in Figure 5.11 that there is a 
drop down selection box below this link. This box indicates what 
service we are going to examine, and the default selection is set to 
the IIS web service. You will now be presented with a view similar to 


that shown in Figure 5.13. 


| properties 


‘“laster Properties 


Web Site 


Operators 


Performance 
ISAPI Filters 


Default Web Site 


Home Directory 


Olsleeiaaie 
Security 


HTTP Head . 
iieteaters WC Extended fe File Format 
Error Messages 


Figure 5.13. Web site master properties. 





You now have even more options than before, and some explanation 
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as to what you can do from here is necessary. First, notice that you 
are currently allowing an unlimited number of client connections. Lf 
you find that your site is extremely busy and performance is degraded 
due to a large number of simultaneous client requests, you can limit 
the number of connections (the ACSA prototype system should never 
experience this problem due to its limited audience size). Another 
connection property setting you can set is timeout, which indicates how 
long IIS will wait before disconnecting an inactive user. 

And if you want to maintain information about your visitors, you 
can enable logging. There are several file formats you can choose from. 
The default log format is set to W3C Extended Log File Format. This ASCII- 
formatted file can be wewed in a text eure such as Wordpad, or you 
can import it into Site Server Express and generate reports based on an 
analysis of these cryptic log files. You can selectively choose what 
information to record by clicking the Properties button, which allows you 
to set both General and Extended log file properties. Figure 5.14 shows 


what features can be customized. 


“¥ internet Service Manager - [IIS://localhost/W3 : Internet Service Manager - [H]S://localhast/W3SYC] - Micro... 


bi ns : a a-s . 


ZWinDir%\System32\Logfiles 


@) OK | & Cancel | @ Help 


Figure 5.14. Customizing the log file. 


All log files can be found in the D:\WINNT\system32\logfiles 
subdirectory. The ACSA program administrator should examine these log 


files on a daily basis (they are saved in the format exYYMMDD.1log, 
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where YY indicates the year, MM the month, and DD the day). Your main 
concern is to look for unusual activity and to note the Internet 
Protocol (IP) address the activity originated from. Once you have this 
address, you can use a utility such as nslookup to resolve the domain 
name of the IP address. For instance, suppose I saw some unusual 
activity coming from 206.39.12.4. I would proceed to open a MSDOS 
prompt and at the command prompt, type nslookup 206.39.12.4. The results 
from this query are illustrated in Table 5.8. 


Server: nps.navy.mil 
Address: 131.120.254.52 


Name: www.dfas.mil 
Address: 206.39.12.4 
Table 5.8. Result of executing nslookup 206.39.12.4. 





If the user's activity is suspect, further correspondence between 
system administrators at NPS and the activity in question (e.g. DFAS in 
this case) should resolve the issue. . 

Other WWW properties you can manage include: 


e Operators, which allows you to specify what additional NT user 
accounts have web-site administrator privileges. 


e Performance, which you can use to tune the web server based on 
the number of hits expected per day. 


e Home Directory, which is used to manage virtual directory 
properties. 


e Documents, which allows you to list a default document name 
that will be loaded by the web server every time a directory 
is accessed but no file name is provided. 


e Security, which allows you to implement directory and file 
security permissions. More on this shortly. 


e Error Messages, which allow you to choose what file will be 
returned in the event that an error status code needs to be 
returned. : 


4. Web Site Directory Security | 


One of the early distinctions made in the ACSA project was that 
different users needed different degrees of access to the web site. It 
was common belief that everyone should be allowed to submit surveys 
(within reason), but only Commanding Officers should be allowed to view 


the aggregate database results. In order to separate these two classes 
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of users, we created user accounts that were authorized different 
permissions, i.e. they had different rights. Then, as we created the 
web site, we divided the content of directories into logical areas that 
were later assigned permissions as described earlier in the section on 
Windows NT Security in this chapter. | 
The manner in which you use the HTMLA interface to assign 
permissions is discussed here. You should have the HTMLA open, and. 
highlight the Results subdirectory. Click Properties on the left side of 
the Internet Service Manager, and you will be guided to another page that 
allows you to select Security. After the Securitybutton, a third page will 


load that presents you with three options: 


a) Anonymous Access and Authentication Control 

Click Edit to configure your Web server’s authentication 
and anonymous access features. Use these features to 

instruct your Web server to confirm the identity of 
users before granting access to restricted content. 
Before your server can authenticate users, you must 
first create valid Windows NT user accounts and then 
configure Windows NT File System (NTFS) directory and 
file permissions for those accounts. 


b) Secure Communication allows you to configure your web 
server's Secure Sockets Layer (SSL) 3.0 secure | 
communications feature. The ACSA project provides a 
secure ASP application that takes advantage of SSL via a 
key (or digital certificate) exchange between the server 
and the client's browser. 


c) IP Address and Domain Name Restrictions can be used to 
increase the granularity with which external 
organizations have access to the IIS web site. We could, 
using this option, enumerate the IP addresses of 
computers that can have access to the web site, but this 
procedure would be time extremely time consuming and 
troublesome. 

Because the Results directory does not require options b or c, you 
should go ahead and click on Option a. Figure 5.15 illustrates what you. 
should see. You will notice that we explicitly disallow anonymous 
access to this directory and the checkbox next to Basic Authentication is 
marked. What this means is that if a client requests any file located 
in the Results directory, he will have to provide a valid username and 
password that corresponds to a user account on the spitfire machine. 


Without the correct information, access to the Results applet will be 


denied. Unfortunately, this means that anyone who has a user account 
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will be able to access the information contained in this directory, so 
to restrict which users have access from those that don't, we have to 
use either Windows NT Explorer or the Microsoft Management Console 
(MMC). If you run Windows NT Explorer, right click once on 
D:\Inetpub\wwwroot\results, select Properties, click on the Security tab and 
select Permissions (recall that this procedure was described earlier in 
the chapter), you will find a list of users that have access. 
Specifically, all Administrators, the user accounts Commander and DocC, 
and the SYSTEM process all have access (WARNING: You should never 
delete or remove SYSTEM from the list of users that have access, as 


this special built-in account refers to the operating system and not a 


specific user). 


@poK | E§icancel | @ Help 





Figure 5.15. Anonymous Access and Authentication Control in the HTMLA. 


Other directories that have permissions set are the Survey 
directory (access is granted to the Administators and Survey Participants 
group, the user account DocC, and SYSTEM). Finally, the wwwroot 
directory, which contains all of these subdirectories, is itself 


protected with the permissions shown in Figure 5.16. 
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Figure 5.16. Permissions on the D:\Inetpub\wwwroot directory. 


The implications of this restriction mean that the contents of 
the web site are not open to the general public. This approach was 
taken in large part due to a new set of regulations promulgated by the 
Secretary of the Navy regarding worldwide web use. A summary of these 
requirements can be found in Appendix J. To preclude having to overhaul 
the web site and meet each and every requirement, it sufficed to put a 
security disclaimer on the main page and secure it from public access. 
You should also note that this web site has not been registered, nor 
should be registered, with any general search engines (such as Lycos, 
Excite, Hotbot, or Webcrawler). By not registering this site, you 
greatly reduce the risk of intruders attempting to penetrate your 


system. 


5. Using Secure Sockets Layer (SSL) for Securing Web Site 
Communications 
Up until this point, we've addressed security in a very limited 
way. Recall that we talked about the need to prevent one client from 
entering multiple surveys, and we partially addressed this issue by 
creating and using the Num_List_DB database (a client could potentially 
enter all surveys for the block of access numbers assigned to his 
Squadron). This utility database adds integrity to the survey process, 
but it offers nothing in terms of privacy and doesn't address system 


availability. It is the former area, privacy, that we examine here. 
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You might be wondering how all of the information is sent from 
the client to the spitfire machine. When a client submits his survey, it 
is bundled into TCP/IP packets and sent over the Internet. The 
information in these packets is unencrypted clear text, and can be 
analyzed by almost anyone with a packet sniffer (a program that can 
analyze TCP/IP packets travelling across a network). This information 
is probably uninteresting and unintelligible without the actual survey, 
but nonetheless, clients are sometimes ill at ease with sending 
information in an insecure manner. For this reason, the ACSA project 
takes advantage of digital certificates and the Secure Sockets Layer 
(SSL) protocol to encrypt information. | 

The SSL portion of the ACSA web site uses a form of cryptography 
known as public key encryption. Using the Certificate Server component of 
IIS, we can generate a public and private key for the server's web 
service. These 40-bit keys do not provide the strongest encryption 
means available (128-bit keys provide more protection), but suffice for 
the purpose of this project. Now, if a client wants to access the 
secure portion of the web site, he simply types in a URL that begins 
with httpsrather than the traditional: http prefix, 

e.g., [https://spitfire.avsafety.nps.navy.mil } , | 

When the client does this, his browser attempts to communicate 
with the server on port number 443. (Standard http requests default to 
port 80 of the target machine). If the server is supporting the SSL 
protocol on this port, it will send its public key back to the client. 
The client's browser indicates that it is receiving this key by showing 
a lock icon that is colored yellow. The browser uses this key to 
encrypt the information it is going to send to the server. The only way 
the information can successfully be decrypted (other than through brute 
force techniques) is for the server to apply its private key on the | 
encrypted data. For this reason, administrators should ensure that the 
private key is carefully protected. If it is ever compromised, 
administrators should attempt to find out why, correct the problem Lt 
possible, and immediately generate a new certificate. 

You can generate keys for the various jepsvees (WWW, ETP, NNTP, . 
CCCs )5 by first starting the Microsoft Management Console (MMC) 

(see Figure 5.17). MMC is found by selecting Start->Programs->Windows NT 


4.0 Option Pack->Internet Information Server->Internet Service Manager. Once the 
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You can now highlight the service that needs a key, and generate 
one by selecting Key->Create New Key from the menu, or by right-clicking 
on the service and selecting Create New Key. To guide you through the 
process of generating a key, we will create one for the WWW service and 
outline each step that is required to successfully create a key. You 
should first ensure that the WWW service is highlighted, as shown in 
Figure 5.18, and then select the option to create a new key by either 
of the means previously described. This should bring up a new dialog 
box with the title "Create New Key" (see Figure 5.19). Here, you have the 
option to either save the certificate to a file (and later forward it 
to a Certificate Authority (CA) such as Verisign), or to send the 
request to an online authority. We are going to choose the latter 
option and send the newly generated certificate to Microsoft's Certificate 
Server application. This application will generate a key that expires 
one year from the day it was geeeea, which effectively ee that we 
are acting as our own CA. Because we are the CA and have not had our 
identity confirmed by a third party, clients will receive our 
certificate but not know if it is indeed us that generated the key that 
the server is sending. Though this is relatively insignificant for the | 
ACSA project, it would definitely deter clients from doing business 
with a company that was processing credit~card transactions for their 
products. Should you desire an identity-validated certificate, you | 
should send your certificate request to an online CA for verification, | 
and then use the Key Manager application to bind the new certificate to 


whatever services you intend to use it with. 
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Figure 5.19. Creating a new key and binding it to the WWW service. 


The next several screens allow you to specify the properties of 


the key, such as its name (or common name), bit length (the default is 


512), and the organization it belongs to and the organization's 


location. When you are finished, the key is forwarded to the Certificate 


Server, which will process it and return you back to the Key Manager 
application. It is here that you should now see a key icon below the 
WWW service. The key has a name, and on the right, you should notice 
the key's status (if it is usable or not), information on when it was 
created and when it will expire, and distinguishing information about 
the key. Figure 5.20 illustrates what you should see when your new key 


has been successfully created and bound to the WWW service. 
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Figure 5.20. Successfully binding a key to the WWW service, as seen in 
the Key Manager application. 


With the new key, you can now access the web site in a secure 
manner - simply use the https prefix followed by the server's domain 
name (spitfire.avsafety.nps.navy.mil) . But suppose there is the more stringent 
requirement that certain portions of the web site can ONLY be accessed 
in a secure manner. Such is the case with the ACSA project, where we 
want the administrator's pages and the ASP version of the HTML survey 
to be accessed in this manner. To do this, we simply put these parts of 
the web site in their own subdirectories, and then use the HTMLA to 


configure each subdirectory for secure communications access. 


6. Network News Transport Protocol (NNTP) 


We briefly mentioned newsgroups earlier in this chapter and the 
three that were related to the ACSA project. Installing the NNTP 
service is easy to do. At any time after you have installed the Windows 
NT 4.0 Option Pack, you can rerun the setup program and add components 
or remove previously installed ones. Since our initial installation did 


not include the NNTP service, we had to add it. Once this was done, the 
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NNTP service was configured by using an HTML interface very similar to 
the WWW HTMLA previously described. You can find the NNTP HTML 
interface by going to Start->Progams->Windows NT 4.0 Option Pack->Internet 
Information Server->Microsoft NNTP Service->NNTP Service Manager (HTML). Figure 
5.20 shows the NNTP HTML administrative interface. From here, you can 


manage the NNTP service in the following ways: 


e specify the port that the service runs on (the default is 
119), the number of simultaneous connections that can be made, 
the maximum article size that a client can post 


e configure the NNTP service to use a Simple Mail Transport 
Protocol (SMTP) server to forward articles to newsgroup 
moderators 


e set newsgroup expiration policies, e.g. how long an article 
should remain posted before it is deleted from the newsgroup 


e determine what clients are using the NNTP service by examining 
session information | 


e configure NNTP security settings 


You should take some time to use this interface and become 
familiar with NNTP service settings. Once the newsgroups have been 
created and are ready to use, the final step in the process is to use a 
newsgroup reader or configure your email client (such as Microsoft 
Outlook Express) to use the NNTP service (the name of the NNTP server 
is spitfire.avsafety.nps.navy.mil) . For more information on how this is done, 


please consult the documentation that came with your software. 
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Figure 5.21. NNTP Server Properties. 


7. Configuring Services Using the Microsoft Management (MMC) 
Console 

The Microsoft Management Console (MMC) is a standardized 
administrative interface that is more than just a utility for 
configuring IIS. In fact, future versions of the Windows NT operating 
system (now known as Windows 2000), will use MMC as the central means 
for controlling, managing, and administering all NT services. MMC was 
prereleased as part of the Windows NT 4.0 Option Pack to allow users to 
acclimate themselves to the new environment well before the next NT OS 
is released. 

The ACSA project runs on Windows NT 4.0 Server software and has 
the Option Pack already installed. The HTML interface used to configure 
various services has already been discussed, but we never considered 
what happens if the IIS web server software is not running or becomes 
corrupted. It should be fairly obvious that in this case, the HTML 
interface to configure your Internet-related services is no longer 
available. At first thought, we may be tempted to reinstall the Option 
Pack and hope for the best, but the better solution to troubleshooting 


and making configuration changes is provided by MMC. 
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You launch MMC by going to Start->Programs->Windows NT 4.0 Option Pack- 


>Microsoft Internet Information Server->Internet Service Manager. MMC will run, and 


you should see something similar to that shown in Figure 5.22. 


: ; “ Intemet Information Server 
‘f= 8 * computer? 
: KB Default FTP Site 
3 RADIUS (Stopped) 
=a) Socks Proxy 
i: @@ Detauk Web Ste 
+g Administration Web Site 
# Sy Web Proxy 
¢ By WeSock Proxy 1a fortunes. mdb 
‘© 26 Default SMTP Site He 12 pagelas? 
| * & Default NNTP Site 9] page2.asp 
| EQ Microsoft Transaction Server : 9] POSTINFO. EG 


4/9] testasp 
ai test2. asp 





Figure 5.22. Microsoft Management Console (MMC) used to configure 
Windows NT services. 


From Figure 5.22, it is apparent that there are several services for 
computer2 that are installed and running: e.g. FTP, HTTP, SMTP, NNTP, as 
well as some proxy services. Notice that the RADIUS service is stopped. 
You can start, stop, and pause services by highlighting them, clicking 
on the right mouse button, and selecting the appropriate action. 
Alternatively, the black triangle, square, and two parallel lines can 
be clicked to start, stop, or pause a service respectively. 

By far the greatest number of configuration changes that can be 
made are to the web service. Figure 5.23 shows the property sheet that 


appears when you highlight the web service, right click, and select 
Properties from the pop-up menu that appears. Among the many changes that 


you can make are: 


e You can change the web service to a non-standard port number, 
thereby restricting access to those who know the new port number. 
The SSL port can likewise be changed. 
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e You can grant access based on Windows NT user accounts. 


e You can customize HTTP headers (e.g. the 404 File Not Found 
message) and have IIS return the page to the client in the event 


of an error. 


e You can modify directory security permissions. 


* Changes are committed only after you exit the program. MMC will 
prompt you "Do you want to save your settinngs to iis.msc?", to which 


you should click OK. 


tDefault Web Site Properties 


RD 





Figure 5.23. Default web site properties as configured through MMC. 


The other services also have various properties that can be 
configured through MMC. It is worthwhile to take some time and examine 
each and every one of these properties. If you are unsure of what a 


property does, consult the Windows NT Option Pack 4.0 documentation at 


(http://localhost/iishelp/iis/misc/default.asp] before proceeding. 


8. Ports Used by the ACSA Project 


SERVICE 





PORT NUMBER 
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H. CONCLUDING REMARKS 


The Windows NT 4.0 Option Pack comes bundled with a set of 
powerful, information-management components that provide significant 
support to Enterprise Information Systems (EIS). The ACSA project uses 
many of these components to provide a robust, scalable site that can 
deliver information to clients in many different ways. The 
configuration of these services is an extremely important topic for 
future developers and administrators. Proper lifecycle support can only 
‘be provided if the individual(s) responsible for this task are 
intimately familiar with the concepts presented in this chapter. The 
ACSA web site has been successfully field-tested and is ready for Navy- 
wide use, and although it can pretty much run itself in a standalone 
manner, it still requires human intervention to comb through IIS log 
files, make changes to HTML pages, or change any of the underlying Java 


code for product enhancement purposes. 
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VI. CONCLUSION 


A. CLOSING REMARKS | 

The purpose of this thesis was to design, develop and test an 
automated, cost-effective prototype model for the Aviation Command 
Safety Assessment (ACSA). Our approach to this task was to integrate 
existing Commercial Off-the-Shelf (COTS) technologies with our 
technical expertise. In the end we developed a system for a cost of 
less than $5000. We think we met this initial challenge, but the 
question remains, is how easy will it be for future developers to 
revise or improve upon this project? To facilitate these efforts, we 
have attempted to lead the reader through our design and development 
thought processes, with an added emphasis on documentation. From this 
‘perspective, then, another measure of our success will be the ease with 
which future developers can rely upon our documentation as presented in 
the previous five chapters. | 

At this point, we should note that there are several minor 
revisions which are not accurately represented in this document. 
Although we were continually making minor code enhancements based upon 
usability and testing feedback, we did not go back and change our 
write-up for minor revisions. Consequently, the following ACSA web site 
documentation differs from the actual ACSA web site in the following 
areas: 


e Expanded survey participants to include all squadron aircrew 
as participants, not just officer aircrew. The granularity 
with which all aircrew positions are represented is fairly 

large, but expanding the scope of the project to consider all 

aircrew was a last minute modification. _ 


e Elimination of any actual squadron number reference to further 
protect the anonymity of each squadron. With this revision the 
database will not contain individual squadrons, rather 
communities with access numbers assigned by the ACSA program 
administrator. 

The true measure of success for the automated ACSA web site will 
be the desirability and usability of this new process from both the 
client and administrator perspective. The site must be accessible, easy 
to use, deliver valuable information in a timely fashion and not create 
an administrative burden for the program administrator. On 9 November 
1998, we presented our thesis to the Human Factors QMB via video- 


teleconference. Our audience included senior officers and civilian 
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representatives from all echelons of naval aviation and was viewed from 
seven different locations throughout the world. The brief included a 
short thesis overview followed by an online real-time site tour. Then, 
on 18 and 19 November 1998, we went into the field for squadron 
usability testing and evaluation. During this visit, we briefed and 
configured the computers at three volunteer squadrons from AIRPAC. In 
every case the prototype system was enthusiastically received. In fact, 
the participating squadrons wanted to begin submitting data 
immediately. Unfortunately, the Internet connection from these 
squadrons was extremely slow, rendering the applets essentially 
unusable. Although we cannot control these client-side variables, we 
believe these limitations will be corrected, thereby enabling 
participating clients to take full advantage of what the web site has 


to offer. 


B. AREAS FOR FUTURE RESEARCH 


As in any research development effort, we were constantly 
experimenting and learning about the technologies we were working with. 
Reflecting back upon several of our design decisions, we recognize 
there might have been a better way to implement some tasks. Often, we 
revised our design and/or code, but on many occasions, we did not go 
back to affect this new perspective. At this point, we feel any program 
revision should include: | 


e Making components for the applets: The code in this project 
has been written specifically for this ACSA project model as 
it exists today. Seemingly minor questionnaire changes, e.g., 
changing the number of questions or the respondent's options, 
will require considerable recoding and programmer effort. 
Putting the questions into a readable, ASCII-text file which 
could then be used by the applet help create an independent 
separation that would allow questions to be changed without 
program code having to be rewritten. The use of JavaBean 
components would further aid in this separation and would 
result in the creation of independent modules with well- 
defined tasks rather than having one OOP program do 
everything. | | 


There are a number of additional areas that could further enhance 


the ACSA web site. Areas for future research include: 


1. E-mail processor: The current model requires an Internet 
connection for submitting questionnaire data. Expanding the 
model to receive e-mail submissions would enable squadron 
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detachments afloat or those without direct Internet access the 
opportunity to submit questionnaires. 


2. On-line individual unit responses: Probably the most sought 
after program enhancement is on-line squadron feedback for the 
individual unit commanding officer. In our presentations to 
each squadron commander, they specifically requested this 
feature. While individual online results are desirable from 
the client perspective, their implementation from the ACSA 
administrator’s perspective is considerably more complicated. 


3. Automated alerts and data monitoring: Although the specific ° 
implementation options are still being discussed, the current 
web site requires the ACSA administrator to physically analyze 
the database. Incorporating an automated rule-based data 
monitoring process would alert the ACSA program administrator 
of any alarming trends in real-time. 


4. Operational Risk Management (ORM) controls: The current model 
only performs the first step in the five-step ORM process: 
hazard identification. Expanding the model to include hazard 
assessment and then recommending risk management coperor is 
the next logical extension to this model. 


5. Active platform “push technology”: Related to the discussion 
in 4 above, when the decision is made to initiate a survey the 
ACSA administrator could “push” this notification to every 
squadron along with their individual survey submission access 
number and individual survey submission numbers. 


C. ACSA PROJECT IMPLEMENTATION AND MANAGEMENT 


Today, our prototype model has been field-tested and is ready for 
implementation. Although the implementation and management of the site 
are issues beyond the scope of this thesis, we feel it is important to 
comment about these two important program elements. The original manual 
survey process was administered once to a limited number of squadrons 
to obtain a representative cross-section of naval aviation. This 
process returned a one-time snapshot of the culture of naval aviation 
safety, for that given time. Our automated ACSA project expands upon 
the potential scope and frequency of this evaluation process. It is 
well within the operational capabilities of this web site to receive 
inputs from one or every Internet-capable aviation squadron in the Navy 
and Marine Corps. 

For example, individual commanding officers could evaluate their 
squadron either before or after cruise, a Type Commander could evaluate 
every subordinate command before or after a significant policy change, 


or all Navy squadrons could be evaluated on a regular basis. By design, 
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the web site does not restrict the frequency or sample size of survey 
submissions. The number of clients, however, determines the amount of 
preparation and administration required by the ACSA program | 
administrator. Although the process is automated, the administrator 
should monitor server operation as surveys are being submitted, review 
web site system logs and connections, and respond to a predictable 
increase in newsgroup information flow. Finally, given the current 
design, the ACSA program administrator will have to analyze individual 
squadron data and provide timely squadron feedback. Regardless of the 
scenario, web site implementation and management will be a crucial 
facet of the program's overall success and its adoption as a useful 


tool by squadron commanders. 
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APPENDIX A. INFORMATION TECHNOLOGY FOR THE TWENTY-FIRST CENTURY (IT-21) 


RTTUZYUW RUHPSGG9842 0890945-UUUU--RUWFNAA. 

ZNR UUUUU | 

R 300944Z MAR 97 ZYB PSN 077820Q24 

FM CINCPACFLT PEARL HARBOR HI//N00// 

TO ALPACFLT 

ALLANTFLT 

INFO RUENAAA/ASSTSECNAV RDA WASHINGTON DC//C4I// 

RUENAAA/CNO WASHINGTON DC//N00/N09/N095/N2/N4/N4 1/N43/N46/N6/N6B/ ° 
N8/N80/N85/N86/N87/N88// | 

RUCBCLF/CINCLANTFLT NORFOLK VA//NO0/N6// 

RUCBACM/CINCUSACOM NORFOLK VA//J00/J6// 

RHHMUNA/USCINCPAC HONOLULU HI//J00/36// 

RHDLCNE/CINCUSNA VEUR LONDON UK//00/N6// 

RULSSEA/COMNAVSEASYSCOM WASHINGTON DC//NO0/NO8/PMS335/PMS3 

RUENMED/BUMED WASHINGTON DC//N00// 

RHRMDAB/RUCINA V/COMUSNAVCENT//NO0/N6// 

RUCTPOA/CNET PENSACOLA FL//NO0// — 

RUEACNP/BUPERS WASHINGTON DC//N00// 

RUHEHMS/COMMARFORPAC//CG/G6// 

RUCKMAA/COMMARFORLANT//CG/G6// 

RULSSPA/COMSPA WARSYSCOM WASHINGTON DC//N00/N05/PMW171/PMW176// 

RUWFADO/NAVSTKAIRWARCEN FALLON NV//N00// 

RULKSDF/COMNAVSECGRU FT GEORGE G MEADE MD//N00// 

RULSAMX/COMNAVSUPSYSCOM MECHANICSBURG PA//N00// 

RUWFAFK/COMNAVSPECWARCOM CORONADO CA//N00// 

RULSADG/NRL WASHINGTON DC//NO0// 

RULSWCB/COMNAVCOMTELCOM WASHINGTON DC//NO0/N3// 

RUCOSAO/NAVMASSO CHESAPEAKE VA//N00/N6// 

RUWFOAA/NCCOSC RDTE DIV SAN DIEGO CA//N433// 

RHHMHAH/CINCPACFLT PEARL HARBOR HI//N00// 

BT 

UNCLAS //N05230// 

ALPACFLT 008/97 

MSGID/GENADMIN/CINCPACFLT/008// 

SUBJ/INFORMATION TECHNOLOGY FOR THE 21ST CENTURY// 

POC/M.R. SCOTT/CDR N6/CINCPACFLT/-/TEL: 808 471-8637// 

POC/D.A. STRAUB/CDR N6/CINCLANTFLT/-/TEL: 757 322-5863// 

RMKS/1. THIS IS THE FIRST IN A SERIES OF JOINT CINCPACFLT AND 

CINCLANTFLT MESSAGES CONCERNING THE DEVELOPMENT AND IMPLEMENTATION 

OFIT-21. THIS MESSAGE PROVIDES IT-21 HARDWARE/SOFTWARE | 

IMPLEMENTATION STANDARDS FOR PROGRAMS INSTALLING INFORMATION 

SYSTEMS ON FLEET UNITS/BASES AND PROVIDES THE FLEET WITH GUIDANCE 

ON MAINTAINING EXISTING INFORMATION SYSTEMS UNTIL INSTALLATION OF 

IT-21 PRODUCTS. THE IT-21 IMPLEMENTATION STANDARDS OUTLINED BELOW 

ARE PROMULGATED IN ADVANCE OF DON-WIDE GUIDANCE FROM THE DON CHIEF 

INFORMATION OFFICER (CIO). THE DON CIO WILL PROMULGATE DON-WIDE 

STANDARDS FOLLOWING NEGOTIATION OF ENTERPRISE-WIDE NETWORK 

OPERATING SYSTEMS AND APPLICATIONS. 

2. BACKGROUND: INFORMATION SUPERIORITY IS THE FOUNDATION OF 

JOINT VISION 2010 BATTLEFIELD DOMINANCE, AS WELL AS THE 

WARFIGHTING VISION FOR EACH SERVICE. NETWORK WARFARE, ROBUST 

INFRASTRUCTURE AND INFORMATION DISSEMINATION TO DISPERSED FORCES 

ARE KEY ELEMENTS IN ACHIEVING INFORMATION SUPERIORITY. IT-21 IS 
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A FLEET DRIVEN REPRIORITIZATION OF C4I PROGRAMS OF RECORD TO 
ACCELERATE THE TRANSITION TO A PC BASED TACTICAL/TACTICAL SUPPORT 
WARFIGHTING NETWORK. THE INACTIVATION OF THE CURRENT DOD MESSAGING 
SYSTEM (AUTODIN) BY DEC 99, WITH NO PLANNED NAVY INFRASTRUCTURE 
REPLACEMENT, MANDATES THE RAPID IMPLEMENTATION OF THIS WARFIGHTING 
NETWORK. 

3. COMMERCIAL NETWORK OPERATING SYSTEMS (NOS) AND E-MAIL PRODUCTS 
HAVE ACHIEVED FUNCTIONAL PARITY. THE FLEETS CANNOT CONTINUE TO 
SUPPORT A MULTITUDE OF DIVERSE OPERATING SYSTEMS AND E-MAIL PRODUCTS 
WITH THEIR OWN TRAINING, OPERATIONAL PROCEDURES AND TROUBLESHOOTIN G 
REQUIREMENTS. THE DOD JOINT TECHNICAL ARCHITECTURE (JTA) AND 

DEFENSE INFORMATION INFRASTRUCTURE COMMON OPERATING ENVIRONMENT 
(DII COE) PROVIDE DOD WITH THE AIS SYSTEM GUIDANCE REQUIRED TO 

TAKE THE NAVY INTO THE 21ST CENTURY. THIS CONVERGENCE OF SOLUTIONS, 
PROBLEMS AND GUIDANCE PROVIDES THE IMPETUS TO ESTABLISH MINIMUM 
NAVY AIS STANDARDS AT THIS TIME. IMPLEMENTATION OF THIS POLICY 
REQUIRES ALL NON-STANDARD NOS AND E-MAIL PRODUCTS BE REPLACED NLT 
DEC 99. © | 

A. WINDOWS NT SERVER 4.0 IS THE STANDARD FLEET NOS. IT WILL 
SOON BE FOLLOWED BY WINDOWS NT 5.0. WINDOWS NT SERVER 4.0 IS DII 
COE COMPLIANT. 

B. MS EXCHANGE IS DESIGNATED AS THE STANDARD E-MAIL SOLUTION : 
FOR BOTH FLEETS TO ENSURE AN INTEROPERABLE SECURE MESSAGING SYSTEM 
IS OPERATIONAL PRIOR TO AUTODIN INACTIVATION NLT DEC 99. 

C. MS OFFICE 97 IS DESIGNATED AS THE STANDARD FLEET OFFICE 
SOFTWARE. 

D. EXPENDITURE OF OPERATING FUNDS TO MAINTAIN EXISTING IT-21 
NONCOMPLIANT NOS AND APPLICATIONS SHALL BE THE ABSOLUTE MINIMUM 
NECESSARY TO MEET OPERATING REQUIREMENTS UNTIL IT-21 NOS/SOFTWARE 
IS INSTALLED EVEN IF TEMPORARY LAN DEGRADATION OCCURS. SOFTWARE 
REQUIREMENTS DRIVE HARDWARE STANDARDS. HARDWARE AND SOFTWARE 
PURCHASED TODAY MUST BE CAPABLE OF MEETING MISSION REQUIREMENTS 
THROUGH THE YEAR 2000. 

4, CINCPACFLT AND CINCLANTFLT ARE ACTIVELY WORKING WITH OPNAV ON 
IT-21 FUNDING AND IMPLEMENTATION PLANS. IN GENERAL, AFLOAT IT-21 
IMPLEMENTATION WILL BE LINKED TO DEPLOYING BATTLEGROUPS AND 
ASHORE IT-21 WILL BE IMPLEMENTED IN A PHASED APPROACH. SPECIFIC 
IMPLEMENTATION SCHEDULES WILL BE PROMULGATED AT A LATER DATE. 
CINCPACFLT AND CINCLANTFLT ARE TRANSITIONING TO WINDOWS NT 4.0, 

MS EXCHANGE AND MICROSOFT OFFICE 97. THIS ENVIRONMENT CANNOT BE 
OPTIMIZED WITHOUT 32 BIT OPERATING SYSTEMS, HIGH RESOLUTION 
DISPLAYS AND MASS STORAGE. ATM BACKBONE LANS WITH AT LEAST 100 MBS 
(TCP/IP)TO THE DESKTOP PC WILL BE INSTALLED ON ALL SHIPBOARD LANS, 
FLEET HEADQUARTERS (CPF, CLF, TYCOMS, GROUP AND SQUADRON COMMANDS) 
AND SHOULD BE INSTALLED IN THOSE SHORE ACTIVITIES THAT SUPPORT 
TACTICAL OPERATIONS. THIS WILL THEN ALLOW TRANSITION TO ATM-TO- 
THE-DESKTOP PC WHEN THE ATM TECHNOLOGY MATURES. 

5. SYSTEM COMMANDS AND PROGRAM MANAGERS: 

A. NTCSS WILL BECOME THE IT-21 PROGRAM OF RECORD FOR 
INSTALLATION OF BOTH SECRET AND UNCLASSIFIED LANS ONBOARD 
COMMISSIONED SHIPS. NTCSS (ATIS/SNAP II) LANS INSTALLED FROM THIS 
POINT ON WILL HAVE AN ATM BACKBONE, 100 MBS (FAST ETHERNET) TO THE 
DESKTOP PC AND THE HARDWARE/SOFTWARE OUTLINED AT THE END OF THIS 
MESSAGE. THE MIGRATION OF NTCSS LANS TO HIGHER CAPACITY LANS WILL 
REDUCE THE NUMBER OF PC'S DELIVERED DURING INITIAL INSTALLATION. 

THE TRADE-OFF OF QUANTITY FOR FRONT END PC'S IS REQUIRED TO © 
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SUPPORT JV-2010 AND AUTODIN INACTIVATION. 
B. SPAWAR IS WORKING WITH NAVSEA TO ENSURE THAT LANS 
INSTALLED DURING NEW CONSTRUCTION MEET THE IT-21 REQUIREMENTS. 
C. APPLICATION PROGRAM MANAGERS SUCH AS JMCIS, NSIPS, TAMPS, 
AND GCSS SHOULD MIGRATE CURRENT APPLICATIONS TO THE DII COE WITH 
AN IMMEDIATE OBJECTIVE OF OBTAINING PC WORKSTATION ACCESS TO pote 


~ APPLICATION DATA ON AN ENTERPRISE LAN. 


D. PROGRAMS INSTALLING INFORMATION SYSTEMS (NEWNET, SMARTLINK, 
SMARTBASE, TELEMEDICINE, ETC.) MUST INSTALL COMPONENTS IN FLEET 
ACTIVITIES THAT MEET IT-21 STANDARDS AND PROVIDE INTEROPERABILITY 
THROUGHOUT THE WARFIGHTING NETWORK. 

6. TYCOMS AND THIRD ECHELON COMMANDS SHALL ENSURE THAT: 

A. SHIPS AND ACTIVITIES INSTALLING NEW LANS, UNDERGOING 
SIGNIFICANT LAN UPGRADES OR THOSE ACTIVITIES WITH STAND ALONE PC'S 
SHALL INSTALL IT-21 HARDWARE AND SOFTWARE. NEW OR REPLACEMENT 
SHIPBOARD AND SHORE BASED TACTICAL LANS SHOULD HAVE AN ATM BACKBONE 
WITH AT LEAST 100 MBS (FAST ETHERNET) TO THE PC. : 

B. SHIPS AND ACTIVITIES WITH EXISTING LANS, WHICH REQUIRE 

REPLACEMENT OF UNSERVICEABLE HARDWARE, SHORT OF A FULL NETWORK 
UPGRADE, SHALL INSTALL HARDWARE WHICH MEETS IT-21 STANDARDS. THE 
NEW EQUIPMENT MAY NOT BE COMPATIBLE WITH THE EXISTING LAN HARDWARE. 
CINCPACFLT AND CINCLANTFELT BELIEVE THAT ALL AUTOMATED INFORMATION 
SYSTEMS (AIS) PROCURED MUST BE COMPATIBLE WITH THE IT-21 LAN 
STANDARDS EVEN IF TEMPORARY LAN DEGRADATION OCCURS. THERE IS ONLY 
SUFFICIENT FUNDING TO DO IT RIGHT THE FIRST TIME. 
7, THEIT-21 STANDARDS BELOW REPRESENT FRONT END MARKET TECHNOLOGY, 
ARE DYNAMIC IN NATURE, AND WILL CONTINUE TO BE CLOSELY LINKED TO 
COMMERCIAL TRENDS. THE STANDARDS LISTED BELOW ARE INTENDED TO BE 

MINIMUM STANDARDS AND WILL BE UPDATED PERIODICALLY. 

A. IT-21 LAN: 

(1) AFLOAT LAN:STANDARDS - ATM FIBER BACKBONE, 100 MBPS 
(FAST ETHERNET) TO THE PC. 

(2) ASHORE TACTICAL AND HEADQUARTERS COMMAND CENTER STANDARD 
(CPF, CLF, TYCOMS, GROUP AND SQUADRON COMMANDS) - ATM BACKBONE, 100 
MBPS (FAST ETHERNET) TO THE PC. 

(3) ASHORE TACTICAL SUPPORT COMMAND STANDARDS (BASES) - ATM 
BACKBONE, 100 MBPS (FAST ETHERNET) TO THE PC. 

(4) METROPOLITAN AREA NETWORKS (MAN) SHOULD BE CAPABLE OF 
SUPPORTING AT LEAST OC-3 (155MBS). 

B. IT-21 SOFTWARE: 

- WINDOWS NT 4.0/5.0 WORKSTATION 

- MS OFFICE 97 PROFESSIONAL (WORD 97, POWERPOINT 97, EXCEL 97, S__ 
ACCESS 97) 

- IBM ANTI VIRUS (NAVY LICENSE, AVAIL FROM NAVCIRT) 

- MS BACK OFFICE CLIENT 

- MS OUTLOOK 97 

- MS EXCHANGE 5.0 

- MS IMAGE COMPOSER 

C. IT-21 DATABASES. RELATIONAL DATABASES THAT CAN SUPPORT WEB 
TECHNOLOGY IAW THE COE (ORACLE, SYBASE, SQL SERVER, ACCESS, ETC.) 

WILL BE USED TO SUPPORT DATA REQUIREMENTS AND APPLICATION 
DEVELOPMENT. ALL PROCESS ENGINEERING INITIATIVES THAT RESULT IN 
DESIGN/REDESIGN OF A DATA COLLECTION/CAPTURE SYSTEM MUST USE COE 
COMPLIANT RELATIONAL DATABASE MANAGEMENT SYSTEMS (RDBMS) SOFTWARE. 
THIS REQUIREMENT IS PROVIDED TO ENSURE RDBMS INITIATIVES USE COTS 
APPLICATION SOFTWARE. FOR ADDITIONAL INFORMATION ON RELATIONAL 
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DATABASES CONTACT CDR SANDY BUCKLES, CPF N67, COMM/DSN (808) 
474-6384, NIPRNET U67@CPF-EMH.CPF.NAVY.MIL. 

D. MINIMUM IT-21 PC CAPABILITIES: CPF CAN CURRENTLY PURCHASE 
THE IT-21 STANDARD PC WITH SOFTWARE FOR $3250.00 - $3579.00 - 

SEE PARA 7(H) AND 7(]). 

- 200 MHZ PENTIUM PRO CPU 

- 64 MB EDO RAM 

- 3.0 GB HARD DRIVE | 

- 3.5 INCH FLOPPY DISK DRIVE 

- 8X IDE CD-ROM 

- DUAL PCMCIA/PC CARD READER 

- PCI VIDEO W/2MB RAM 

- 17 INCH MONITOR (1280 X 1024) 

- POINTING DEVICE (TRACKBALL OR MOUSE) 

- SOUNDBLASTER (COMPATIBLE) AUDIO CARD WITH SPEAKERS KEYBOARD 
- CPU COMPATIBLE 100 MBPS FAST ETHERNET NIC 

E. STANDARD IT-21 LAPTOP WORKSTATION: APPROXIMATELY $5300 - 

SEE PARA 7(H). 

- 150 MHZ PENTIUM 

- 32 MB EDO RAM ~ 

- 12.1 IN SVGA ACTIVE MATRIX COLOR DISPLAY 
- 2.1 GB EIDE HDD 

- 6X INTERNAL CD-ROM 

- MODEM, PCMCIA SLOTS, NIC CARD 

- SMART LITHIUM BATTERY 

F. IT-21 NT FILE SERVER FOR DIRECTORY NETWORK SERVICE: 
APPROXIMATELY $26K - SEE PARA 7(H). THESE ARE MINIMUM 
SPECIFICATIONS. NEEDS OF THE SPECIFIC NETWORK WILL DICTATE 
REQUIREMENTS. | 
- DUAL 166 MHZ PENTIUM CPU 
- 512K SECONDARY CACHE MEMORY- 256 MB RAM 
- TWO 4 GB SCSI HDD 
- ONE 6 GB DAT DRIVE 
- ONE 3.5 INCH FLOPPY DISK DRIVE 
- 6X SCSI CD-ROM 
- DUAL PCMCIA/PC CARD READER 
- 2 DPT SCSI Il] CACHING CONTROLLERS (SMARTCACHE 4) 

- PCI VIDEO W/2MB RAM 

- 17 INCH MONITOR (1280 X 1024) 

- POINTING DEVICE (TRACKBALL OR MOUSE) 

- KEYBOARD 

- TWO CABLETRON CPU COMPATIBLE ATM NIC CARDS 

- ANTEC DUAL POWER SUPPLY CASE (HOT SWAPPABLE) 

G. IT-21 FILE SERVER/APPLICATION SERVER: APPROXIMATELY $26K - 

SEE PARA 7(H). SAME AS IT-21 NT FILE SERVER FOR DIRECTORY NETWORK 
SERVICE WITH THE FOLLOWING CHANGES: 

- CHANGE HDD RQRMT TO FIVE 4 GB DRIVES 

- CHANGE DAT TO 18 GB. 

H. PRICES FOR PC TECHNOLOGY ARE CONSTANTLY CHANGING AND CAN 
VARY GREATLY DEPENDING ON METHOD OF PROCUREMENT. FOR EXAMPLE, ON 
28 MAR 97 AN IT-21 PC PURCHASED DIRECTLY FROM A VENDOR COSTS $3643. 
GOVERNMENT RATE FOR SMALL PURCHASES (LESS THAN TEN) IS $3579. 

A BULK PROCUREMENT (MORE THAN SEVENTY-FIVE) COSTS $3250. THE ABOVE 
PRICES INCLUDE SHIPPING. BULK PROCUREMENTS SHOULD BE MADE THROUGH 
THE TYPE COMMANDERS WHEN APPROPRIATE. MR. RICK KOOKER, CPF N65, 
COMM/DSN:(808) 474-5882, NIPRNET: U65@CPF-EMH.CPF.NAVY.MIL IS 
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AVAILABLE TO ASSIST TYCOMS WITH AIS PROCUREMENT ISSUES. | 
I. AS NETWORK COMPUTER TECHNOLOGY EVOLVES SOME COMMANDS MAY BE 

ABLE TO TRANSITION TO NETWORK COMPUTERS. WHEN CONSIDERING 

INSTALLATION OF NETWORK COMPUTERS, TOTAL NETWORK COST MUST BE 

EVALUATED. NETWORK COMPUTERS HAVE NOT MATURED SUFFICIENTLY TO 

IMPLEMENT THEM IN FLEET PLATFORMS AT THIS TIME. 

8. WAIVER REQUESTS FROM THE ABOVE STANDARDS SHOULD BE SUBMITTED 

DIRECTLY TO THE RESPECTIVE CPF/CLF N6. POINTS OF CONTACT ARE AS 

FOLLOWS: | 
A. CINCLANTFLT::CDR DEBRA STRAUB AT COMM (757) 322-5863, 

NIPRNET: U6@CLF.NAVY.MIL 
B. CINCPACFLT: CDR MIKE SCOTT AT COMM (808) 474-7860, 

‘NIPRNET:U6@CPF-EMH.CPF.NAVY.MIL.// 

BT 
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APPENDIX B. FASTFORWARD LICENSE AGREEMENT 


. SOFTWARE LICENSE AGREEMENT 
_USE OF SOFTWARE ORDERED FROM WEBLOGIC IS PROVIDED ONLY UNDER LICENSE 
WITH WEBLOGIC. PLEASE READ THE FOLLOWING LICENSE CAREFULLY AND 
INDICATE YOUR ACCEPTANCE BY USE OF THE ACCEPTANCE BOX. CERTAIN 
CAPITALIZED TERMS ARE DEFINED IN SECTION 14. 


1. LICENSE TERMS 


(a) Evaluation Use. The terms of this Section 1(a) are applicable to 
you if you have registered as an Evaluation Customer. Subject to the 
terms of this Agreement, WebLogic, Inc. ("WebLogic") grants to you a 
non-exclusive, non-transferable, license to use the evaluation 

version of the WebLogic Software (the "Software"), in binary object 
code form for evaluation and trial purposes only. You may use any 
third party software products or modules supplied by WebLogic solely 
with the Software. You may not disclose the results of software 
performance benchmarks to any third party without WebLogic's prior 
written consent. This license begins upon downloading and ends 
thirty (30) days thereafter (the "Evaluation Period”). When the 

license expires you must stop using the Software. You are forbidden 
from using the Software for Production Use or offering it for resale 
under the terms of this Section 1(a). All rights not specifically 

granted to you herein are retained by WebLogic. | 


(b) Development Use License. The terms of this Section 1(b) are 
applicable to you if you have registered as a Development Use 
Customer. Subject to the terms of this Agreement, WebLogic, Inc. 
("WebLogic") grants to you a non-exclusive, non-transferable, 
fee-bearing license to use the Software in object code form solely 
for Development Use for the number of users and the number of CPU's 
and at the Sites, all as specified on Licensee's invoice. You may 

use any third party software products or modules supplied by 
WebLogic solely with the Software. You may not disclose the results 
of software performance benchmarks to any third party without 
WebLogic's prior written consent. Additional restrictions with 
respect to third party software, if any, will be delivered to you 

along with your license key. You are forbidden from using the 


Software for Production Use or offering it for resale under the 

terms of this Section 1(b). If you integrate the Software into an 
application and intend to resell the resulting integrated 

application you must contact us to obtain the appropriate 

distribution license. All rights not specifically granted to you 

herein are retained by WebLogic. 


(c) Production Use License. The terms of this Section 1(c) are 
applicable to you if you have registered as a Production Use 
Customer. Subject to the terms of this Agreement, WebLogic Inc. 

("WebLogic") grants to you, a non-exclusive, non-transferable, 
fee-bearing license to use the Software solely for Production Use on 
the Number of CPU's and at the Sites, all as specified on your 
invoice. You may use any third party software products or modules 
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supplied by WebLogic solely with the Software. You may not disclose 
the results of software performance benchmarks to any third party 
without WebLogic's prior written consent. Additional restrictions, 

if any, with respect to third party software will be delivered to 

you along with your license key. If you integrate the Software into 

an application and intend to resell the resulting integrated 

application you must contact us to obtain the appropriate 

distribution license. All rights not specifically granted to you 

herein are retained by WebLogic. 


(d) The terms of this Section 1(d) are applicable to you if you are 

a Development Use Customer or Production Use Customer. You may make 
‘a reasonable number of copies of the Software and Documentation 
(provided that all copyright and other proprietary notices of 

WebLogic and its licensors are reproduced), solely for archival and 
emergency back-up purposes, and disaster recovery testing purposes. 

If you would like to alter the number of Users, or number or 

identity of Sites and Servers indicated on your invoice, you must 

contact WebLogic in writing for our approval; you may be subject to 
additional fees. 


2. LICENSE FEES 


2.1 In consideration of the applicable license(s) granted pursuant 

to Sections 1(b) or 1(c), you agree to pay WebLogic the applicable 
license fee(s) within 30 days of issuance of WebLogic's invoice. All 
charges and fees provided for in this Agreement are exclusive of and 
do not include any taxes, duties or similar charges imposed by any 
government ("Taxes"). You agree to pay or reimburse WebLogic for all 
such Taxes (other than taxes on the net income of WebLogic). 


2.2 If you are outside the United States, you agree that the amounts 
to be remitted to WebLogic are to be the actual amounts due without 
withholding taxes or other assessments by authorities anywhere in 
the foreign location, which withholding taxes or assessments you 
agree to pay. You will promptly furnish WebLogic with certificates 
evidencing payment of such amounts. 


3. ANNUAL MAINTENANCE AND SUPPORT 


You must purchase annual Maintenance and Support from WebLogic in 
order to qualify for the Maintenance and Support Services described 
in this Section. [ & 


3.1 Maintenance and Support Services. Maintenance and Support means 
that WebLogic will provide: (a) software upgrades and product 
enhancements upon their commercial release, and appropriate 
documentation, and (b) technical assistance with respect to the 

Software, including (i) clarification of functions and features; 

(11) clarification of documentation; (111) technical support and 

guidance in the operation of the Software; and (iv) Software error 
analysis and correction. Major product releases are not covered by 
the Maintenance and Support contract. WebLogic will use commercially 
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reasonable efforts to provide error corrections or work-arounds for 
the most severe errors as soon as possible and based upon WebLogic 
classification of the severity of the error. Expanded support or 
technical assistance is available per request at an additional 

charge in accordance with WebLogic's then-current policy. 
Maintenance and Support will be provided only with respect to _ 
versions of the Software that, in accordance with WebLogic policy, — 
are then being supported by WebLogic. 


3.2 Your Responsibilities. You agree to provide WebLogic with 
reasonable access to your personnel and equipment, if necessary 

- during normal business hours in order to provide Maintenance and 
Support. You agree to document and promptly report all errors or 
malfunctions of the Software to WebLogic. 


4. INTEREST 


Any amounts not paid when due (including License Fees and 
Maintenance and Support Fees) will be subject to interest at the 
lesser of 1.5% per month or the highest amount permissible under 
applicable law. | | 


5. LIMITED WARRANY/LIMITATIONS ON LIABILITY 


5.1 Limited Warranty for Certain Uses. With respect to the Software 
licensed under Section 1(b) or 1(c) (i.e. Production Use and 
Development Use Licenses, not Evaluation Use Licenses) WebLogic 
warrants to you and for your benefit only that the Software you 
license from WebLogic will perform in substantial accordance with 
its documentation for a period of thirty (30) days from the date you 
receive the Software. If during this time period the Software does 
not perform as warranted, WebLogic shall, at its option, undertake 

to correct the Software, replace such Software free of charge or, if 
neither of the foregoing is commercially practicable, terminate this 
Agreement and refund to you the License Fee. This warranty will not 
apply if the Software has not been properly installed, used outside 
the scope of the applicable license, modified, altered or operated 

in an unwarranted environment. 


THE FOREGOING IS WEBLOGIC’S SOLE LIABILITY FOR AND YOUR SOLE AND 
EXCLUSIVE REMEDY FOR BREACH OF THIS WARRANTY. 


5.2 No Other Warranties. EXCEPT AS PROVIDED IN SECTION 5.1, THE 

SOFTWARE IS PROVIDED "AS-IS"; WEBLOGIC MAKES NO REPRESENTATION OR 
WARRANTIES, EXPRESS OR IMPLIED WITH RESPECT TO THE SOFTWARE, 
INCLUDING WITHOUT LIMITATION WARRANTIES OF FITNESS FOR A PARTICULAR 
USE OR PURPOSE, MERCHANTABILITY, NON-INFRINGEMENT, OR THAT THE 
SOFTWARE WILL OPERATE WITHOUT INTERRUPTION OR BE ERROR FREE, AND 
WEBLOGIC HEREBY DISCLAIMS ALL SUCH REPRESENTATIONS AND WARRANTIES. 
WEBLOGIC MAKES NO REPRESENTATIONS ABOUT THE SUITABILITY OF THE 
SOFTWARE OR ABOUT THE ACCURACY OF ANY CONTENT OR INFORMATION re 
ACCESSIBLE BY THE SOFTWARE. 
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5.3 Limitations on Liability. 


(a) With Respect to Evaluation Use Customers. EVALUATION USE 

SOFTWARE IS PROVIDED GRATUITOUSLY AND, THEREFORE, WEBLOGIC AND ITS 
SUPPLIERS SHALL NOT BE LIABLE FOR ANY DAMAGES (INCLUDING DIRECT, 
INDIRECT, INCIDENTAL, CONSEQUENTIAL AND SPECIAL DAMAGES) UNDER ANY 
THEORY OF LIABILITY (INCLUDING TORT CONTRACT, OR ANY OTHER THEORY) 
WHETHER SUFFERED BY YOU OR ANY OTHER USER OF THE SOFTWARE, OR ANY 
THIRD PARTY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES 


(b) With Respect to Production Use Customers and Development Use 

Customers/Cumulative Liability. WITH RESPECT TO SOFTWARE PROVIDED 

UNDER THE TERMS OF A PRODUCTION USE LICENSE OR DEVELOPMENT LICENSE, 
WEBLOGIC AND ITS SUPPLIERS SHALL NOT BE LIABLE, UNDER ANY THEORY OF 
LIABILITY, INCLUDING TORT (INCLUDING NEGLIGENCE AND STRICT 

LIABILITY) CONTRACT, OR OTHERWISE, FOR ANY INDIRECT, INCIDENTAL, 
CONSEQUENTIAL OR SPECIAL DAMAGES ARISING OUT OF YOUR USE OF THE 
SOFTWARE, OR THE USE OF THE SOFTWARE BY ANY END USER, USER, 
DISTRIBUTOR, OR ANY THIRD PARTY, OR IN ANY OTHER WAY ARISING OUT OF 
THIS AGREEMENT, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, 
INCLUDING ANY LOSS OF PROFITS, LOSS OF USE, BUSINESS INTERRUPTION, 
LOSS OF DATA, OR COST OF COVER. WEBLOGIC'S CUMULATIVE LIABILITY 
UNDER THIS AGREEMENT SHALL BE LIMITED TO THE AMOUNT OF LICENSE FEES 
PAID BY YOU TO WEBLOGIC HEREUNDER FOR THE SOFTWARE GIVING RISE TO 
SUCH LIABILITY. 


Some States do not permit disclaimers of certain warranties or 
limitations on certain types of liability under certain | 
circumstances; consequently, some of the foregoing disclaimers and 
limitations may not be applicable to you, in whole or in part. 


6. SOFTWARE CHANGES 


WebLogic reserves the right at any time not to release or to 
discontinue release of any Software and to alter prices, features, 
specifications, capabilities, functions, licensing terms, release 
dates, general availability or other characteristics of the — 
Software. 


7. OWNERSHIP 


Title, ownership rights, and all intellectual property rights in and 

to the Software and Documentation shall remain the sole and 
exclusive property of WebLogic and/or its licensors. You agree to 
abide by the copyright law and all other applicable laws of the 
United States. You acknowledge that the Software contains valuable 
confidential information and trade secrets of WebLogic and/or its 
licensors; therefore, you agree not to modify the Software, create 
derivative works of, or attempt to decipher, decompile, disassemble 
or reverse engineer the Software or assist or encourage any third 


party in doing so. 
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8. INDEMNIFICATION 


8.1 WebLogic agrees to indemnify and defend you from and against any 
and all claims, actions or proceedings, arising out of any claim 

that the Software infringes or violates any U.S. patent, copyright 

or trade secret right of any third party; so long as you provide: 

(i) prompt written notice to WebLogic of such claim; (11) cooperate 
with WebLogic in the defense and/or settlement thereof, at 

WebLogic's expense; and, (iii) allow WebLogic to control the defense 
and all related settlement negotiations. 


8.2 If it is, or if in the reasonable opinion of WebLogic it is 
probable that it will be, determined by a court of competent 


jurisdiction that such Software or the sale or use thereof infringes 
any patent, copyright, trade secret or trademark of a third party or 
if WebLogic is enjoined from distributing such Software, then 
WebLogic, at its sole option and expense, may: (i) procure for you 
the rights and to the same extent as those granted under this 
Agreement; (ii) replace such Software with other software, which 
complies with the specification of the Software; or, (iii) modify 
the Software, to avoid infringement while continuing to have the 
Software meet the Specification or (iv) terminate this Agreement and 
return to you your license fee, less an amount commensurate with 
your period of use of the Software, as amortized over a three year 
period. 


8.3 You agree that this Section 8 represents WebLogic's sole 
obligation to you and shall be your sole and exclusive remedy 
pursuant to this Agreement for intellectual property infringement. 


8.4 Limitations. WebLogic shall have no indemnity obligation for 
claims of infringement to the extent resulting or alleged to result 
from: (i) any combination, operation, or use of any Software with 
any programs or equipment not supplied by WebLogic; (ii) any 
modification of the Software by a party other than WebLogic; and 
(iii) your failure, within a reasonable time frame, to implement any 
replacement or modification of Software provided by WebLogic. 


9. TERM AND TERMINATION 


9.1 This Agreement will take effect upon submission of your 
registration form for the Software, and will remain in force until 
terminated in accordance with this Agreement. This Agreement may be 
terminated by you upon thirty (30) days’ prior written notice to 
WebLogic or by destroying or returning to us all copies and partial 
copies of the Software and Documentation under your control; 
provided that no such termination will entitle you to a refund of 

any portion of the License Fee. WebLogic may, by written notice to 
you, terminate this Agreement immediately if any of the following 
events ("Termination Events") occur: (a) you fail to pay any amount - 
due WebLogic within thirty (30) days after WebLogic gives you 
written notice of such nonpayment; or (b) you are in material breach 
of any non-monetary provision of this Agreement, which breach, if 
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capable of being cured, is not cured within thirty (30) days after 
WebLogic gives you written notice thereof. 


9.2 Termination of this Agreement will not affect the provisions 
relating to the payment of amounts due, or provisions limiting or 
disclaiming WebLogic's liability, which provisions will survive 
termination of this Agreement. 


9.3 Within thirty (30) days after the date of termination or 
discontinuance of this Agreement for any reason whatsoever, you 
shal] destroy the Software and all copies, in whole or in part, all 
Documentation relating thereto, and any other Confidential 
Information in its possession that is in tangible form. 


10. UNITED STATES GOVERNMENT RIGHTS 


The Software provided under this Agreement is commercial computer 
software developed exclusively at private expense, and in all 
respects are proprietary data belonging solely to WebLogic. 


10.1 Department of Defense End Users: If the Software is acquired by 

or on behalf of agencies or units of the Department of Defense 

(DOD), then, pursuant to DoD FAR Supplement Section 227.7202 and its 
successors (48 C.F.R. 227.7202) the Government's right to use, 

reproduce or disclose the Software and any accompanying 

documentation acquired under this Agreement is subject to the 

restrictions of this Agreement. 


10.2 Civilian Agency End Users: If the Software is acquired by or on 
behalf of civilian agencies of the United States Government, then, 
pursuant'to FAR Section 12.212 and its successors (48 C.F.R. 
12.212), the Government's right to use, reproduce or disclose the 
Software acquired under this Agreement is subject to the 

restrictions of this Agreement. 


11. LEGAL COMPLIANCE 


You may not download or otherwise export or re-export the Software 
or any underlying information or technology except in full 

compliance with all United States and other applicable laws and | 
regulations. In particular, but without limitation, none of the 

Software or underlying information or technology may be downloaded 
or otherwise exported or re-exported (i) into (or to a national or 
resident of) Cuba, Iran, Iraq, Libya, North Korea, Syria, or Sudan, 

or (ii) to anyone on the US Treasury Department's list of Specially 
Designated Nationals or the US Commerce Department's Table of Deny 
Orders. By licensing the Software, you are agreeing to the foregoing 
and you are representing and warranting that you are not located in, 
under control of, or a national or resident of any such country or 

on any such list. 
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12. NON-ASSIGNMENT/BINDING AGREEMENT 


Neither this Agreement nor any rights under this Agreement may be 
assigned or otherwise transferred by you, in whole or in part, 
whether voluntary or by operation of law without the prior written 
consent of WebLogic. Subject to the foregoing, this Agreement will 
be binding upon and will inure to the benefit of the parties and 

their respective successors and assigns. 


13. MISCELLANEOUS 


13.1 If any term, condition, or provision in this Agreement is found 
to be invalid, unlawful or unenforceable to any extent, the 
remaining terms, conditions and provisions will continue to be valid 
and enforceable to the fullest extent permitted by law. 


13.2 This Agreement (including any addenda hereto signed by both 
parties) represents the entire agreement of the parties with respect 
to the subject matter of this Agreement and supersedes all previous 
communications, representations, understandings and agreements, 
either oral or written, between the parties with respect to said 
subject matter. 


13.3 This Agreement may not be amended, except in writing, signed by 
both parties. [No terms, provisions or conditions of any purchase 

order, acknowledgment or other business form that you may use in 
connection with the acquisition or licensing of the Software will 

have any effect on the rights, duties or obligations of the parties 

under, or otherwise modify, this Agreement, regardless of any 

failure of WebLogic to object to such terms, provisions or 

conditions. } 


13.4 This License shall be governed by and construed in accordance 
with the laws of the State of California as applied to agreements 
made, entered into and performed entirely in California by 
California residents. You agree that any dispute regarding this 
License will be heard in the state or federal courts having — 
jurisdiction in San Francisco County, California, and you agree that 
you shall be subject to the personal jurisdiction of such courts. 


13.5 Use of WebLogic, Inc. software constitutes an acceptance of the 
terms of this agreement. If you do not agree to be bound by these 
provisions, you are required to destroy all copies of WebLogic 
software from your equipment immediately. 


14. DEFINITIONS 


The following terms shall have the following meanings: 


"Application" means any use of any of the published Application 
Programming Interfaces (APIs) documented or referenced in the 
Documentation, whether such use is from a 3rd-party browser 
(including but not limited to Netscape Navigator or Microsoft 
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Internet Explorer), or from another software program designed or 
modified to use APIs provided with the Software. 


"Concurrent Users" means the maximum number of simultaneous 
Users who may use the Software as set forth on your registration 
form. 


"Development Use" means use of the Software by a Development Use 
Customer to design, develop and/or test new Applications. 


"Documentation" means the technical publications prepared and 
delivered to you by WebLogic or provided to you on the WebLogic 
web site relating to use of the Software, such as reference, 

user, installation, systems administrator and technical guides. 


"Production Use" means using the Software in an Application for 
internal business purposes only. Production Use does not include 
the right to reproduce the Software for sublicensing, resale, or 
distribution to any party other than a User, including without 
limitation, distributing the Software as part of a VAR, OEM, 
distributor or reseller arrangement. 


"Server" means a single computer processor capable of executing 


the Software. 
"Site" means the specific, physical location of a Server, as set 
forth on your registration form. 


"Software" means those items of software, in object code format 
only, proprietary to WebLogic and/or its suppliers, that you 
have ordered from WebLogic pursuant to your registration form 
and under the terms of this Agreement. 


Last updated 11/21/97 


Copyright © WebLogic, Inc. 
All Rights Reserved. 
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APPENDIX C. RESULTS APPLET SOURCE CODE 


import java.awt.*; 

import java.applet.*; 

import java.sql.*; 

import java.text.*; 

import symantec.itools.awt.StateCheckBox; 
import symantec.itools.awt.BorderPanel; 
import symantec. itools.awt.shape.Rect; 

import symantec. itools.awt.shape.HorizontalLine; 
import symantec. itools.awt.shape. VerticalLine; 
import symantec.itools.awt.WrappingLabel; 
import symantec. itools.awt.Label3D; 


public class Results extends Applet 


{ 
final int PIXEL_FACTOR = 2; 


final int COLUMN_HEIGHT = 200; 
final int COLUMN_WIDTH = 20; 

final int PERCENT = 100; 

final int MIN_SEARCH_SIZE = 10; 

final int DISPLAY_OFFSET = 150; 

final int PERCENT_LABEL_OFFSET = 40; 
final short MIN SURVEY NUM =5; 


java.sql.Connection con; 
java.sql.Statement stmt; 


java.lang.String url = "jdbc:ff-microsoft://spitfire.avsafety.nps.navy.mil:1433/Survey2_DB"; 


java.lang.String questionsf] = { 


"1. My command conducts adequate reviews and updates of safety standards and operating 
procedures.", 
"2. My command uses an internal audit and hazard reporting system to catch any problems that 
may lead to a mishap.", 

"3. My command has a defined process to set training goals and to review performance.”, 

"4. My command closely monitors Prociency and currency standards to ensure aircrew are 
qualified to fly.”, 

"5. Command leadership i iS actively involved in the safety program and the management of safety 
matters.”, 

"6. My command has a defined process to effectively manage the high-risk aviator.", 

"7. Human Factors Councils have been successful in identifying aircrew members who pose a risk 
to safety.”, 

"8. Human Factors Boards have been successful in reducing chances of an aircraft mishap due to 
the high-risk aviator.", 

"9. My command makes effective use of the flight surgeon to help identify and manage high-risk 
personnel.", 

"10. Command leadership encourages reporting safety discrepancies without the fear of negative 
repercussions.”, 

"hI. Individuals i in my command are willing to report safety violations, unsafe behaviors, or 
hazardous conditions.", 
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"12. In my command, peer influence is effective at discouraging violations of standard operating 
procedures, or safety rules.", 

"13. In my command, we believe safety is an integral part of flight operations.", 

"14. In my command, anyone, who intentionally violates standard procedures, or safety rules, is 
swiftly corrected.”, 

"15. In my command, violations of operating procedures, flying regulations, or general flight 
discipline are rare." 

"16. Leaders in my ‘command encourage everyone to be safety conscious and to follow the rules.", 

"17. In my command, an aviator who persistently violates flight standards and rules will seriously 
jeopardize his/her career.", 

"18. Iam not comfortable reporting a safety violation because people in my command would 
react negatively toward me.”, 

"19. My command has a reputation for high quality performance.", 

"20. My command sets high quality standards and strives to maintain quality control.", 

"21. My command closely monitors quality and corrects any deviations from established quality 
standards.", 

eas Quality standards in my command are clearly stated in formal publications and procedural 
guides.”, 

12o: Command leaders permit cutting corners to get a job done.", : 

"24. Lack of experienced personnel has adversely affected my command's ability to operate 
safely.", 

"25. Safety decisions are made at the proper levels, by the most qualified people in my 
command.”, 

"26. Command leaders consider safety issues during the formation and execution of operational 
and training plans.", 

"27. Command leadership has a clear picture of the risks associated with its flight operations.", 

"28. My command takes the time to identify and assess risks epee with its flight 
operations.", 

"29. My command does a good job managing risks associated with its flight operations.", 

"30. My command has increased the chances of a mishap due to inadequate or incorrect risk 
assessment.”, 

"31. Iam provided adequate resources (time, staffing, budget, and equipment) to accomplish my 
job.", : 
"32. My command provides the right number of flight hours per month for me to fly safely.", 
"33. I have adequate time to prepare for my brief and flight.", 

"34. Based upon my command's personnel and other assets, the command is over-committed.", 
"35. My command has incorporated Operational Risk Management processes in decision making 
at all levels.", 

"36. My supervisor can be relied on to keep his/her word.", 

"37. Our command leaders and supervisors can be trusted.", 

"38. My command's Safety Officer is highly regarded.”, 

"39. Our Safety Officer is influential in promoting safety.", 

"40. My command is genuinely concerned about safety.", 

"41. Command leadership is successful in communicating its safety goals to unit personnel.", 
"42. My command provides a positive command climate that promotes safe flight operations.", 
"43. Command leadership is actively involved in the safety program and management of safety 
matters.”, 

"44. Command leadership sets the example for compliance with flight standards.", 

"45. My command ensures that all unit members are responsible and accountable for safe flight 
operations." | 

"46. Command leadership willingly assists in providing advice concerning safety matters.”, 

"47. Command leadership reacts well to unexpected changes to its plans.”, 

"48. My command does not hesitate to temporarily restrict from flying individuals who are under 
high personal stress.", 

"49. 1 am adequately trained to safely conduct all of my flights.”, 

"50. Moral and motivation in my command are high.", 
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"51. My command ensures the uniform enforcement of all operating standards among unit 
members.", 
"52. Crew rest standards are enforced at my command.”, 
"53. In my command, NATOPS tests and check rides are conducted as intended, to candidly 
assess aircrew qualifications.”, . 
"54. My command provides adequate safety backups to catch possible human errors during high- 
risk missions.", 
"55. Within my command, good communications flow exist up and down the chain of command.", 
"56. My command has good two-way communication with external commands.", 
"57. Safety education and training are adequate in my command.”, 
"58. The Safety Department is a well-respected element of my command.”, 
"59. The Aviation Safety Officer position is a sought-after billet in my command.", 
"60. My command's Safety Department keeps me well informed regarding important safety 
information.", 
"61. My command's Aircrew Coordination Training program is helping to improve mission 
performance and safety."}; | 


//declare variables used in calculating the display columns 
int Y_coordDisagree =0, Y_coordNeutral =0, Y_coordAgree =0, Y_coordNotApp =0; 


int rowCount =0, numDisagree =0, numNeutral =0, numAgree =0, numNotApplicable =0, numTotal =0; 


double disagreePixelHeight =0.0, neutralPixelHeight =0.0, agreePixelHeight =0.0, 
notAppPixelHeight =0.0; 


double disagreePercent =0.0, neutralPercent =0.0, agreePercent =0.0, notAppPercent =0.0; 


java.lang.String squad{] = {"HC", "HCS", "HM" ,"HMH", "HMT", "HS", "HSC", "HSL", 
"VAQ", "VAW", "VE", "VFA", "VMAQ", "VMFA", 
"VP", "VQ", "VR", "VRC", "VS", "VT", "VX", "Other"}; 


java.lang.String service[] = {"USN", "USMC"}; 
java.lang.String location[] = {"East Coast", "West Coast", "Other"}; 


public void initQ) 
{ 


// This code is automatically generated by Visual Cafe when you add 

// components to the visual environment. It instantiates and initializes 
// the components. To modify the code, only use code syntax that matches 
// what Visual Cafe can generate, or Visual Cafe may be unable to back 
// parse your Java file into its visual environment. 
H{{INIT_CONTROLS 

setLayout(null); 

setSize(552,509); 

borderPanell = new symantec.itools.awt.BorderPanel(); 

borderPanell .setLayout(null); 

borderPanel] .setBounds(0,0,552,492); 

borderPanell .setBackground(new Color(16762880)); 
add(borderPanel1 ); 

SubmitQueryButton = new java.awt.ButtonQ); 
SubmitQueryButton.setLabel("Submit Your Query"); 
SubmitQueryButton.setBounds(374,228, 120,35); 
SubmitQueryButton.setFont(new Font("Dialog", Font.BOLD, 12)); 
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SubmitQueryButton.setForeground(new Color(255)); 
SubmitQueryButton.setBackground(new Color(12632256)); 
borderPanel] .add(SubmitQueryButton); 
SubmitQueryButton.setCursor(new Cursor(Cursor. HAND CURSOR)); 
questionBox = new java.awt.Choice(); 
questionBox.addItem("Select a survey Question"); 
questionBox.addltem("Question 1"); 
questionBox.addItem("Question 2"); 
questionBox.addlitem("Question 3"); 
questionBox.addItem("Question 4"); 
questionBox.addItem("Question 5"); 
questionBox.addltem("Question 6"); 
questionBox.addlItem("Question 7"); 
questionBox.additem("Question 8"); 
questionBox.addItem("Question 9"); 
questionBox.addltem("Question 10"); 
questionBox.addItem("Question 11"); 
questionBox.addJtem("Question 12"); 
questionBox.addltem("Question 13"); 
questionBox.addItem("Question 14"); 
questionBox.addItem("Question 15"); 
questionBox.addItem("Question 16"); 
questionBox.addItem("Question 17"); 
questionBox.add]tem("Question 18"); 
questionBox.addItem("Question 19"); 
questionBox.addltem("Question 20"); 
queéstionBox.addItem(""Question 21"); 
questionBox.addItem("Question 22"); 
questionBox.add]tem("Question 23"); 
questionBox.addltem("Question 24"); 
questionBox.addItem(""Question 25"); 
questionBox.addltem("Question 26"); 
questionBox.addItem("Question 27"); 
questionBox.additem("Question 28"); 
questionBox.addItem("Question 29"); 
questionBox.addltem("Question 30"); 
questionBox.addltem("Question 31"); 
questionBox.addltem("Question 32"); 
questionBox.addItem("Question 33"); 
questionBox.additem("Question 34"); 
questionBox.addItem("Question 35"); 
questionBox.addltem("“Question 36"); 
questionBox.addltem("Question 37"); 
questionBox.addltem("Question 38"); 
questionBox.additem(""Question 39"); 
questionBox.addItem("Question 40"); 
questionBox.addltem("Question 41"); 
questionBox.addItem("Question 42"); 
questionBox.addltem(""Question 43"); 
questionBox.additem("Question 44"); 
questionBox.addltem("Question 45"); 
questionBox.addltem("Question 46"); 
questionBox.additem("Question 47"); 
questionBox.addltem("Question 48"); 
questionBox.addItem("Question 49"); 
questionBox.addltem("Question 50"); 
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questionBox.additem("Question 51”); 
questionBox.additem("Question 52"); 
questionBox.addltem("Question 53"); 
questionBox.additem("Question 54"); 
questionBox.additem("Question 55"); 
questionBox.addItem("Question 56”); 
questionBox.addItem("Question 57"); 
questionBox.addltem("Question 58"); 
questionBox.addItem("Question 59"); 
questionBox.addltem("Question 60"); 
questionBox.addltem("Question 61"); 
try { 


questionBox.select(0); 


} 

catch (IllegalArgumentException e) { } 

borderPanell .add(questionBox); 
questionBox.setBounds(350,72, 170,40); 
questionBox.setFont(new Font("Dialog”, Font.BOLD, py: 
questionBox.setForeground(new Color(0)); 
questionBox.setBackground(new Color(16777215)); 


/froubleshooting text display area controls. To view values on the applet 
//change the textDisplayArea.setVisible(false) to true and recompile. 
textDisplayArea = new java.awt.TextArea(); 
textDisplayArea.setEditable(false); 
textDisplayArea.setVisible(false); 

textDisplay Area.setBounds(386,288,60, 144); 
textDisplayArea.setBackground(new Color(16777215)); 
borderPanel! oe 


disagreeColumn = new symantec. itools.awt.shape. Rect(); 


try { 
disagreeColumn.setFillColor(new java.awt.Color(167 11680)); 


} 
catch(java.beans.Property VetoException e) { } 


tty { 
disagreeColumn.setFiliMode(true); 


} 

catch(java.beans.Property VetoException e) { } 
disagreeColumn.setVisible(false); 
disagreeColumn.setBounds(100,150,20,200); 
disagreeColumn.setBackground(new Color(16777215)); 
borderPanell .add(disagreeColumn); 

neutralColumn = new symantec.itools.awt.shape.Rect(); 


try { 
neutralColumn.setFillMode(true); 


} 

catch(java.beans.Property VetoException e) { } 
neutralColumn.setVisible(false); 
neutralColumn.setBounds(170,150,20,200); 
neutralColumn.setBackground(new Color(0)); 
borderPanel1.add(neutralColumn); 

agreeColumn = new symantec.itools.awt.shape.Rect(); 


try { 
} 


agreeColumn.setFillColor(new java.awt.Color(255)); 
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catch(java. beans. PropertyVetoException e) {} 
try { 


} | 
catch(java.beans.PropertyVetoException e) { } 


agreeColumn.setVisible(false); 
agreeColumn.setBounds(230,150,20,200); 

borderPanell .add(agreeColumn); 

notAppColumn = new symantec.itools.awt.shape.RectQ); 


try { 


agreeColumn.setFillMode(true); 


notAppColumn.setFillColor(new java.awt.Color(16776960)); 


} 
catch(java.beans.PropertyVetoException e) { } 


tryst 
notAppColumn.setFillMode(true); 


j 

catch(java.beans.PropertyVetoException e) { } 
notAppColumn.setVisible(false); 
notAppColumn.setBounds(295, 150,20,200); 

' borderPanell -add(notAppColumn); 

titleLabel = new java.awt.Label("Command | Assessment",Label. CENTER); 
titleLabel.setBounds(0, 10,530,56); 

titleLabel.setFont(new Font("Serif", Font. BOLD, 30)); 
titleLabel.setForeground(new Color(0)); 
titleLabel.setBackground(new Color(16762880)); 

borderPanel]1 .add(titleLabel); 

scaleHorizLine = new symantec.itools.awt.shape.HorizontalLine(Q); 
scaleHorizLine.setBounds(50,350,300,2); 

borderPanel1 .add(scaleHorizLine); 

scaleVerticalLine = new symantec.itools.awt.shape.VerticalLineQ); 
scaleVerticalLine.setBounds(50, 150,2,200); 

borderPanel] .add(scaleVerticalLine); 

tenPercentLine = new symantec.itools.awt.shape. HorizontalLine() 
tenPercentLine.setBounds(50,330, 15,2); | 
tenPercentLine.setForeground(new Pane OEHe 15)); 
borderPanel].add(tenPercentLine); 

twentyPercentLine = new symantec. itools.awt.shape.HorizontalLine(); 
twentyPercentLine.setBounds(50,3 10,20 2); 

borderPanel1l .add(twentyPercentLine); 

thirtyPercentLine = new symantec. itools.awt.shape. Horizontall ine): 
thirtyPercentLine.setBounds(50,290, 15,2); 3 
thirtyPercentLine.setForeground(new Color(16777215)); 
borderPanel] .add(thirtyPercentLine); | 
fortyPercentLine = new symantec. itools.awt. Snape HorizontalLine(); 
fortyPercentLine.setBounds(50,270,20,2); 

borderPanell .add(fortyPercentLine); 

fiftyPercentLine = new symantec.itools.awt.shape.HorizontalLine(Q); 
fiftyPercentLine.setBounds(50,250, 15,2); 

fiftyPercentLine.setF oreground(new Color(16777215)); 

borderPanel1 .add(fiftyPercentLine); 

sixtyPercentLine = new symantec.itools.awt.shape.HorizontalLine(Q); 
sixtyPercentLine.setBounds(50,230,20,2); 

borderPanel1 .add(sixtyPercentLine); 

seventyPercentLine = new symantec.itools.awt.shape. HorizontalL ineO: 
seventyPercentLine.setBounds(50,210, 15,2); . 
a aaa setForeground(new Color( 16777215); 
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borderPanell .add(seventyPercentL ine); 

eithtyPercentLine = new symantec. itools.awt.shape. HorizontalLine(): 
eithtyPercentLine.setBounds(50,190,20,2); 

borderPanel]! .add(eithtyPercentLine); 

ninetyPercentLine = new symantec.itools.awt.shape. HorizontalLine(): 
ninetyPercentLine.setBounds(50,170,15,2); 
ninetyPercentLine.setForeground(new Color(16777215)); 

borderPanell .add(ninetyPercentLine); 

hundredPercentLine = new symantec. eee tee 
hundredPercentLine.setBounds(50,150,20,2); 

borderPanel] .add(hundredPercentLine); 

questionDisplayLabel = new symantec.itools.awt.WrappingLabel(); 
questionDisplayLabel.setBounds(14,408,492,60); 
questionDisplayLabel.setFont(new Font("Dialog", Font. BOLD, 14)); 
borderPanel1 .add(questionDisplayLabel); 
questionDisplayLabel.setCursor(new Cursor(Cursor. HAND CURSOR)); 
disagreeLabel = new symantec.itools.awt. WrappingLabel(); 


try { 
disagreeLabel.setText("1 - 3 Disagree"); 


} 
catch(java.beans.Property VetoException e) { } 
try { 
disagreeLabel.setAlignStyle 
(symantec. itools.awt. WrappingLabel ALIGN CENTERED); 


} 

catch(java.beans.Property VetoException e) { } 
disagreeLabel.setBounds(78,360,60,36); 
disagreeLabel.setFont(new Font("Dialog", Font.BOLD, 12)); 
borderPanell .add(disagreeLabel); 

neutralLabel = new symantec.itools.awt.WrappingLabel(); 


try { 
neutralLabel.setText(" 4 Neutral"); 


} , 
catch(java.beans.PropertyVetoException e) { } 


{ 
neutralLabel.setAlignStyle 
(symantec.itools.awt.WrappingLabel. ALIGN CENTERED); 


catch(java.beans.PropertyVetoException e) { } 
neutralLabel.setBounds(155,360,60,48); 
neutraiLabel.setFont(new Font("Dialog", Font.BOLD, 12)); 
borderPanel1 .add(neutralLabel); 

agreeLabel = new symantec. itools.awt. WrappingLabel(); 


try { 
agreeLabel.setText("5 -7 Agree"); 


} | 
catch(java.beans.PropertyVetoException e) { } 


{ 
agreeLabel.setAlignStyle 
(symantec. itools.awt.WrappingLabel.ALIGN_CENTERED); 


catch(java.beans.Property VetoException e) { } 
agreeLabel.setBounds(213,360,60,41); 
agreeLabel.setFont(new Font("Dialog", Font. BOLD, 12)); 
borderPanel1! .add(agreeLabel); 
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notAppLabel = new symantec. itools.awt. WrappingLabel(); 


try { 
notAppLabel.setText("Not | Applicable"); 


} | , 
catch(java.beans.PropertyVetoException e) { } 


{ 
notAppLabel.setA lignStyle 
(symantec.itools.awt.WrappingLabel. ALIGN_CENTERED); 


} | 

catch(java.beans.PropertyVetoException e) { } 
notAppLabel.setBounds(269,360,90,36); 
notAppLabel.setFont(new Font("Serif", Font.BOLD, 12)); 
borderPanell .add(notAppLabel); 

zeroPercentLabel = new symantec.itools.awt. WrappingLabel(); 


try { 
zeroPercentLabel.setText("0 %"); 


} 
catch(java.beans.Property VetoException e) { } 
try { 
zeroPercentLabel. setAlignStyle 
(symantec. itools.awt. WrappingLabel. ALIGN CENTERED); 


catch(java.beans.PropertyVetoException e) { } 
zeroPercentLabel.setBounds(14,336,3 1,24); 
zeroPercentLabel.setFont(new Font("Dialog", Font.BOLD, 12)); 
borderPanel] .add(zeroPercentLabel); 

twentyPercentLabel = new symantec.itools.awt.WrappingLabelQ; 


try { cae 
twentyPercentLabel.setText("20 %"); 


3 
catch(java.beans.PropertyVetoException e) { } 
try { | 
twentyPercentLabel.setAlignStyle 
(symantec.itools.awt.WrappingLabel. ALIGN_CENTERED); 


} 

catch(java.beans.PropertyVetoException e) { } 
twentyPercentLabel.setBounds(14,302,36,24); 
twentyPercentLabel.setFont(new Font("Dialog", Font.BOLD, 12)); 
borderPanel1 .add(twentyPercentLabel); 

fortyPercentLabel = new symantec. itools.awt. WrappingLabel(); 


try { 
fortyPercentLabel.setText("40 %"); 


3 
catch(java.beans.Property VetoException e) { } 
try { 
fortyPercentLabel.setAlignStyle 
(symantec.itools.awt.WrappingLabel. ALIGN_CENTERED); 


catch(java.beans.Property VetoException e) { } 
fortyPercentLabel.setBounds(14,264,36,24); 
fortyPercentLabel.setFont(new Font("Dialog", Font. BOLD, 12)); 
borderPanel1 .add(fortyPercentLabel); 

sixtyPercentLabel = = new symantec. itools.awt. WrappingLabel(); 


try { 
} 


sixtyPercentLabel.setText("60 %"); 
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catch(java.beans.Property VetoException e) { } 


{ 
sixtyPercentLabel.setAlignStyle 
(symantec. itools.awt.WrappingLabel. ALIGN CENTERED); 


catch(java.beans.Property VetoException e) { } 
sixtyPercentLabel.setBounds(14,224,36,24); 
sixtyPercentLabel.setFont(new Font("Dialog", Font.BOLD, 12)); 
borderPanel! .add(sixtyPercentLabel); 

eightyPercentLabel = new symantec.itools.awt. WrappingLabel(); 


try { 
eightyPercentLabel.setText("80 %"); 


catch(java.beans.PropertyVetoException e) { } 


{ 
eightyPercentLabel.setAlignStyle 
(symantec.itools.awt.WrappingLabel.ALIGN_CENTERED); 


catch(java.beans.Property VetoException e) { } 

ce acre setBounds(14, 182,36,24); 
tyPercentLabel.setFont(new Font("Dialog", Font, BOLD, 12)); 

bende ull .add(eightyPercentLabel); 

hundredPercentLabel = new symantec. itools.awt. WrappingLabel(); 


hundredPercentLabel.setText("100 %"); 
} | 
catch(java.beans.Property VetoException e) { } 


{ 
hundredPercentLabel.setAlignStyle 
(symantec.itools.awt.WrappingLabel. ALIGN CENTERED); 


} 

catch(java.beans.Property VetoException e) { } 
hundredPercentLabel.setBounds(14,144,35,24); 
hundredPercentLabel.setFont(new Font("Dialog", Font. BOLD, 12); 
borderPanel 1 .add(hundredPercentLabel); 

numSurveysLabel = new symantec. itools.awt.WrappingLabel(); 

try { 


numSurveysLabel.setText("Number of surveys ="); 


} 

catch(java.beans.PropertyVetoException e) { } 
numSurveysLabel.setVisible(false); 
numSurveysLabel.setBounds(74,84,228,24); 
numSurveysLabel.setFont(new Font("Serif", Font. BOLD, 18)); 
borderPanel1 .add(numSurveysLabel); 

disagreePercentLabel = new symantec. itools.awt. Label3DQ; 
disagreePercentLabel.setVisible(false); 
disagreePercentLabel.setBounds(90, 120,40, 15); 
disagreePercentLabel.setFont(new Font("Dialog”, Font.BOLD, 12)); 
disagreePercentLabel.setBackground(new Color(16762880)); 
borderPanell .add(disagreePercentLabel); 

neutralPercentLabel = new symantec. itools.awt.Label3DQ); 
neutralPercentLabel.setVisible(false); 
neutralPercentLabel.setBounds(160,120,40,15); 
neutralPercentLabel.setFont(new Font("Dialog”, Font.BOLD, 12)); 
neutralPercentLabel.setBackground(new Color(16762880)); 
borderPanel1 .add(neutralPercentLabel); 
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sussepeccutlaber= new symantec.itools.awt.Label3DQ); 
agreePercentLabel.setVisible(false); 
agreePercentLabel.setBounds(220, 120,40,15); 
agreePercentLabel.setFont(new Font("Dialog", Font.BOLD, 12)); 
agreePercentLabel.setBackground(new Color(16762880)); 
borderPanel]l .add(agreePercentLabel); 
notAppPercentLabel = new symantec.itools.awt.Label3DQ; 
notAppPercentLabel.set Visible(false); 

notA ppPercentLabel.setBounds(285, 120,40, 15); 
notAppPercentLabel.setFont(new Font("Dialog", Font.BOLD, 12)); 
notAppPercentLabel.setBackground(new Color(16762880)); 
borderPanel1.add(notAppPercentLabel); 
squadronCommunityBox = new java.awt.Choice(); 
squadronCommunityBox.addItem("Select a Community"); 
squadronCommunityBox.addItem("HC"); 
squadronCommunityBox.addlitem("HCS"); 
squadronCommiunityBox.addItem("HM"); 
squadronCommunityBox.addIitem("HMH"); 
squadronCommunityBox.addItem("HMT"); 
squadronCommunityBox.addItem("HS"); 
squadronCommunityBox.addItem("HSC"); 
squadronCommunityBox.addItem("HSL"); 
squadronCommunityBox.addItem("VAQ"); 
squadronCommunityBox.addItem("VAW"); 
squadronCommunityBox.addItem("VF"); 
squadronCommunityBox.addltem("VFA"); 
squadronCommunityBox.addItem("VMAQ"); 
squadronCommunityBox.addItem("VMFA"); 
squadronCommunityBox.addItem("VP"); 
squadronCommunityBox.addItem("VQ"); 
squadronCommunityBox.addItem("VR"); 
squadronCommunityBox.addItem("VRC"); 
squadronCommunityBox.addItem("VS"); 
squadronCommunityBox.addltem("VT"); 
squadronCommunityBox.addltem("VX"); 
squadronCommunityBox.addltem("Other"); 


try { : | 
squadronCommunityBox.select(0); 


} 

catch (IllegalArgumentException e) { } . 

borderPanel1 .add(squadronCommunityBox); 
squadronCommunityBox.setBounds(350, 108, 170,36); 
squadronCommunityBox.setFont(new Font("Dialog”, Font. BOLD, 12)); 
squadronCommunityBox.setBackground(new Color(16777215)); 
serviceChoiceBox = new java.awt.Choice(); 
serviceChoiceBox.addItem(""Select a Service"); 
serviceChoiceBox.addItem("USN"); 
serviceChoiceBox.addItem("USMC"); 

try { 


serviceChoiceBox.select(0); 


} 

catch (IllegalArgumentException e) { } 

borderPanell .add(serviceChoiceBox); 
serviceChoiceBox.setBounds(350, 144, 170,36); 
serviceChoiceBox.setFont(new Font("Dialog", Font.BOLD, 12)); 
serviceChoiceBox.setBackground(new Color(16777215)); 
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squadronLocationBox = new java.awt.Choice(); 
squadronLocationBox.addltem("Select a Location"); 
squadronLocationBox.addltem("East Coast"); 
squadronLocationBox.addItem("West Coast"); 
squadronLocationBox. addItem("Other"); 


try { 
squadronLocationBox.select(0); 


catch (IllegalArgumentException e) { } 
borderPanel1.add(squadronLocationBox); 
squadronLocationBox.setBounds(350, 180, 170,36); 
squadronLocationBox.setFont(new Font("Dialog", Font. BOLD, 12)); 
squadronLocationBox.setBackground(new Color(16777215)); 
selectA QuestionLabel = new java.awt.Label 

| ("You must select a question to submit a query."); 
selectA QuestionLabel.setVisible(false); 
selectA QuestionLabel.setBounds(74,252,276,36); 
selectA QuestionLabel.setFont(new Font("Dialog", Font.BOLD, 12)); 
borderPanell .add(selectA QuestionLabel); 
noResultsLabel = new java.awt.Label("Sorry, no records this query."); 
noResultsLabel.setVisible(false); 
noResultsLabel.setBounds(98,228, 180,26); 
noResultsLabel.setFont(new Font("Dialog", Font.BOLD, 12)); 
borderPanell .add(noResultsLabel); 
processingQueryLabel = new java.awt.Label 

("Processing your query ...",Label. CENTER); 

processingQueryLabel.setVisible(false); 
processingQueryLabel.setBounds(122, 192, 158,32); ; 
processingQueryLabel.setFont(new Font("Dialog", Font.BOLD, 12)): 
borderPanel1 .add(processingQueryLabel); 


/T}} 


H{ {REGISTER LISTENERS 
SymMouse aSymMouse = new SymMouse(); 
SubmitQueryButton. addMouseListener(aSymMouse); 
SymItem ISymItem = new SymItemQ); 
questionBox. padiven tents yay: 
HT} } 

}//end public void initQ) 


H{{DECLARE CONTROLS 
symantec.itools.awt.BorderPanel borderPanel1; 
java.awt.Button SubmitQueryButton; 

java.awt.Choice questionBox; 

java.awt.TextArea textDisplayArea; 
symantec.itools.awt.shape.Rect disagreeColumn; 
symantec.itools.awt.shape.Rect neutralColumn; 
symantec.itools.awt.shape.Rect agreeColumn; 
symantec.itools.awt.shape.Rect notAppColumn; 
java.awt.Label titleLabel; 
symantec.itools.awt.shape.HorizontalLine scaleHorizLine; 
symantec. itools.awt.shape. VerticalLine scaleVerticalLine; 
symantec. itools.awt.shape.HorizontalLine tenPercentLine; 
symantec. itools.awt.shape.HorizontalLine twentyPercentLine; 
symantec.itools.awt.shape.HorizontalLine thirtyPercentLine; 
symantec.itools.awt.shape.HorizontalLine fortyPercentLine; 
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symantec.itools.awt.shape.HorizontalLine fiftyPercentLine; 
symantec.itools.awt.shape.HorizontalLine sixtyPercentLine; 
symantec.itools.awt.shape.HorizontalLine seventyPercentLine; 
symantec.itools.awt.shape.HorizontalLine eithtyPercentLine; 
symantec.itools.awt.shape.HorizontalLine ninetyPercentLine; 
symantec.itools.awt.shape.HorizontalLine hundredPercentLine; 
symantec.itools.awt.WrappingLabel questionDisplayLabel; 
symantec. itools.awt.WrappingLabel disagreeLabel; 
symantec.itools.awt.WrappingLabel neutralLabel; 
symantec.itools.awt.WrappingLabel agreeLabel; 
symantec.itools.awt.WrappingLabel notAppLabel; 
symantec.itools.awt.WrappingLabel zeroPercentLabel; 
symantec.itools.awt.WrappingLabel twentyPercentLabel; 
symantec.itools.awt.WrappingLabel fortyPercentLabel; 
symantec.itools.awt.WrappingLabel sixtyPercentLabel; 
symantec.itools.awt.WrappingLabel eightyPercentLabel; 
symantec.itools.awt.WrappingLabel hundredPercentLabel; 
symantec. itools.awt.WrappingLabel numSurveysLabel; 
symantec.itools.awt.Label3D disagreePercentLabel; 
symantec.itools.awt.Label3D neutralPercentLabel; 
symantec.itools.awt.Label3D agreePercentLabel; 
symantec.itools.awt.Label3D notAppPercentLabel; 
java.awt.Choice squadronCommunityBox; 

java.awt.Choice serviceChoiceBox; 

java.awt.Choice squadronLocationBox; 

java.awt.Label selectA QuestionLabel; 

java.awt.Label noResultsLabel; 

java.awt.Label processingQueryLabel; 


class SymMouse extends java.awt.event.MouseA dapter { 


|| nannnnnnonnnannnnnnnn nnn ne nnn nn nnn nn naan anew ennnnnnn semen enn nnn nnnnn nnenennnnennnnnnnn armen nnnnnnannnnenaacaieanennan 


//Function: mousePressed() 
//Parameters: event—a 
//Return Type: None 


//Purpose: Records mouse click on "submit a query” button. Calls 

// clearDisplay to reset the displays 

/} in the event of multiple queries. 

|| wnnnmewwnnnnnnnn nn nnn nnn nnn nnn nnn nnn nnn nnn nn nnn nnn nnn nnn n nn nnn nn nn nnn enen nanan enrennneeeceran nanan mmmemma ne 


public void mousePressed(java.awt.event.MouseEvent event) 


Object object = event.getSource(); 
if (object == SubmitQueryButton){ 
SubmitQueryButton_MousePressed(event); 


} 
+//end mousePressed() 


//Function: clearDisplayQ) 

//Parameters: None 

//Return Type: None 

/{Purpose: Clears all screen displays and display columns. Function 


iH called after submitting each query to calculate the 
// display data off screen then display once all values are 
H calculated. | 
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|] nwnweewnnnnnnwen nena nnn n en ennn nnn nnnn nnn nennn nanan nen nnnnnneeen een enne waren nnnnananenenennneneneennnmennennnenenenn= 

public void clearDisplayQ 

{ | 
disagreeColumn.setVisible(false); 
neutralColumn.setVisible(false); 
agreeColumn.setVisible(false); 
notAppColumn.setVisible(false); 
disagreePercentLabel.setVisible(false); 
neutralPercentLabel.setVisible(false); 
agreePercentLabel.setVisible(false); 
notAppPercentLabel.setVisible(false); 
noResultsLabel.setVisible(false); 
numSurveysLabel.setVisible(false); 

-questionDisplayLabel.setVisible(false); 


}//end clearDisplay() 


|| Oe oe ELE ON Re ae OE eT eee oe RO re Ee a ee ee ERE SC Oe 


/fFunction: displayData() 

//Parameters: None 

//Return Type: None 

//Purpose: | Checks the total number of records for this display, 


HI numTotal, against the mmimum number of records required 

/ to display query data, MIN SURVEY NUM. This feature protects 

/ individual anonymity at the beginning of the survey 

| process. If the query returns more than MIN SURVEY NUM 

Hf records then this function sets visible each display 

H/ object. 

| | --n2---------- =~ non nnnnnnn nnn nnn nnn nnn nnn nn nnn nnn nnn nnn nnn nnn nnnnnnnnnnnnansanenenenmeneeennnanennnnnnens 
public void displayData() 

{ 


//check that the required number of records exist to display data 
if (numTotal < MIN_SURVEY NUM) { 

clearDisplayQ); 

//required number did not exist, display no results alert 
noResultsLabel.setVisible(true); 7 
processingQueryLabel.setVisible(false); 
return; 


} 


//required number of records exists, displaying results 
else { 


clearDisplayQ; 
try { 


//displays the corresponding survey question 
questionDisplayLabel.setText("Question "+ SHON von, getSelectedIndex()-1)); 
questionDisplayLabel.setVisible(true); 


//display the number of surveys used to calculate the display column data 
numSurveysLabel.setText("Number of surveys: " + rowCount); 
} catch(java.beans.Property VetoException e) {} 


processingQueryLabel.setVisible(false); 
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numSurveysLabel.setVisible(tme); 
noResultsLabel.setVisible(false); 
disagreeColumn.setVisible(true); 
disagreeColumn.setBounds 
(100,Y_coordDisagree,COLUMN_WIDTH,(int)disagreePixelHeight); 
neutralColumn.setVisible(true); 
neutralColumn.setBounds 
(170,Y_coordNeutral, COLUMN_WIDTH,(int)neutralPixelHeight); 
agreeColumn.setVisible(true); | 
agreeColumn.setBounds 
(230,Y_coordAgree,COLUMN_WIDTH,(int)agreePixelHeight); 
notAppColumn.setVisible(true); 
notAppColumn.setBounds 
(295,Y_coordNotApp,COLUMN_WIDTH (intnotAppPixelHeight) 
setPercentLabel Visible(); 


oS 
}//end displayData() 


| Ree RTE Re ee sR RE RO oO em anna en ea NY an eR 


//Function: setPercentLabel Visible() 
//Parameters: None 


/fReturn Type: None 
‘Purpose: Sets the percent display labels to visible and positions 


LI each label above each column by PERCENT_LABEL OFFSET pixels. 

|| aennonennnannnnnnennnnnnnn nnn nwa enn nnn mannan enn nnnn nnn nnnn neers nena anne anna nena nnennnneennnnenenenranwemmnmmnammnn 
public void setPercentLabelVisibleQ) 

{ 


disagreePercentLabel.setVisible(true); 
neutralPercentLabel.setVisible(true); 
agreePercentLabel.setVisible(true); 
notAppPercentLabel.setVisible(true); 


//calculating position of each display label 

- disagreePercentLabel.setBounds(90,Y_coordDisagree - PERCENT. LABEL OFFSET,45,30); 
neutralPercentLabel.setBounds(160,Y_coordNeutral - PERCENT LABEL _OFFSET,45,30); 
agreePercentLabel.setBounds(220,Y_coordAgree - PERCENT_LABEL_OFFSET,45,30); 
notAppPercentLabel.setBounds(280,Y_coordNotApp - PERCENT_LABEL_OFFSET,45,30); 


}//end setPercentLabelVisibleQ) 


aa a wre i 


//Function: isColumnZero() 
/fParameters: None 


//Return Type: None 
//Purpose: If the percent label for each selma is zero then 


// this function places "0.0" in the percent label. 
|| 2n2nnnnnnnnnnnnnennennenneecennnnne nan aannnannen nana newnsenenennnran an nnnn nana name neenennunananccsaesamananannannnnns 
public void isColumnZero() 
{ 
try { 


NumberFormat nf = NumberFormat.getInstance(); 
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} 





nf.setMaximumFractionDigits(2); 


java.lang.String result = nf.format(disagreePercent); 
if (disagreePercent > 0.0) disagreePercentLabel.setText(result); 
else disagreePercentLabel.setText("0.0"); 
result = nf.format(neutralPercent); 
if (neutralPercent > 0.0) neutralPercentLabel.setText(result); 
else neutralPercentLabel.setText("0.0"); 
result = nf.format(agreePercent); 
if (agreePercent > 0.0)agreePercentLabel.setText(result); 
else agreePercentLabel.setText("0.0"); 
result = nf.format(notAppPercent); 
if (notAppPercent > 0.0)notAppPercentLabel.setText(result); 
else notAppPercentLabel.setText("0.0"); 


| catch(java.beans. PropertyVetoException e) { y 
}//end isColumnZero() 


| [nwnnnwnneonnnnnennnnnnananennnennseenannnsencecaneonersennasasonnennnccocencececcecnenceneessenecnneenccecnenesncene= 


//Function: SubmitQueryButton_MousePressed() 
//Parameters: event — mouse button click 

//Return Type: None 

//Purpose: Checks that a question has been selected from the 


Hf questionBox. Initiates connection to the database, 

// and sets the visibility of the display columns 

// to true, displaying in positions calculated from 

Ps the database data. 
[]omvona-ewwnernnnnenwennnnnmnnanen nnn nena nnn anne nnn enn nn nn wenn nnn nnnannna manana annn nnn enennnnnnnnnnennennecnenannas 


void SubmitQueryButton_MousePressed(java.awt.event.MouseEvent event) 


//used in troubleshooting, not visible on normal applet 
textDisplay Area.appéndText("\nButton Pressed"); 


clearDisplayQ); 

/{checks to verify a question selection was made, if not 

//then clear display and display alert to select a question 

if ((questionBox.getSelectedIndex() == 0) || (questionBox.getSelectedIndex() = -1)){ 
cibatiein eer setVisible(true); 

return; 


//a question was selected, display the results 
else { 


selectA QuestionLabel.setVisible(false); 
processingQueryLabel.setVisible(true); 


makeConnection(); 
isColumnZero(); 
processQuery(); 
closeConnectionQ); 
calculateDisplayColumns(); 
isColumnZero(); 
displayData(); 

display TroubleShootingDataQ; 
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} 
}//end SubmitQueryButton_MousePressed() 


class SymItem implements java.awt.event.ItemListener { 
||nennnnmnnenenannanaaceenwcnennenn anon naneenennnnnenannennnnnennenencsenaeoenmananennnnananenmenannananeenmnnmmanans 
/fFunction:  itemStateChanged() 
//Parameters: None 
/fReturn Type: None 
/fPurpose: Records the selection of a question from the questionBox. 


public void itemStateChanged(java.awt.event.ItemEvent event) 


Object object = event.getSource(); 
if (object == questionBox) 
QuestionBox_ItemStateChanged(event); 


} 
i//end itemStateChanged() 


| nocennnwannnnveennnnnnneneaencuncnnenneneerennnnnnneeennennnecenennnnennncnnaterannennneernimannnmanmennuaame mmm 


//Function: QuestionBox_ItemStateChanged() 
//Parameters: event — selection box input 
/fReturn Type: None 

//Purpose: _ Frees any shared resources called by 


Hf SubmitQueryButton_MousePressed 
// when the data has been returned from the database. 
| fwennnnnnnnnnnnne newman anne enn wen nnn nn nnn nn nnn anne eee n nen e rene nnn nn nnn neen nnn n ne nmnnnneennenanaeaanmennewamamnnn 


void QuestionBox_ItemStateChanged(java.awt.event.ItemEvent event) 


int selection = questionBox.getSelectedIndex(); 
textDisplayArea.appendText( selection + " was your selection \n" ); 
}//end QuestionBox_ItemStateChanged() 


/, on an on ae a Ge OO Ow SSS SAS asses ee See ae eee ea en oe OES SS Se Bee ee ee ee i ee ee OSS SSS Aare nnz 


//Function: | makeConnection() 

//Parameters: None 

//Return Type: None 

//Purpose: Establishes a connection to the database. 

| onnnnnnnennnnnnnnnnnnnnnnn nnn n nnn n enna nn nnneennnnnnnnn mera canna neenennnnannenncnmennnnnanmamenanannneme nnn 


public void makeConnection(Q) 


{ 


Class.forName("connect.microsoft.MicrosoftDriver").newInstance(); 
con = DriverManager.getConnection(url, "sa", ""); 
stmt = con.createStatement(); 


textDisplayArea.appendText("Successful connection!\n"); 


} 
catch (Exception e) { 
textDisplayArea.appendText(e.toString()); 
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}//end makeConnection() 


| | RANT ST IE LEN eS LE A ST TT OO ORE MP TRUCE AME ES PRET SESE ER eI renee maT 
//Function: processQuery() 

//Parameters: None 

//Return Type: None 

//Purpose: Determines the specific query to be passed to the database 


// from the user's selections of: question number, community, 
Hf service and or location. Each query selection calls 
// the appropriate query function, e.g. queryService(query). 
Hf Calls clearDisplay(Q) to clear the display in the event of 
H multiple user queries. 
| area os 
public void processQuery() 
{ 
java.lang.String query = "SELECT Q" ; 
clearDisplayQ); 


if( ((serviceChoiceBox.getSelectedIndex() !=0) && 
(serviceChoiceBox.getSelectedIndex() !=-1)) && 
((squadronCommunityBox.getSelectedIndex() !=0) && 
(squadronCommunityBox.getSelectedIndex() != -1)) && 
((squadronLocationBox.getSelectedIndexQ) !=0) && 
(squadronLocationBox.getSelectedIndex() != -1)) ) 


querySquadronCommunityServiceLocation( query ); 
else if ( ((serviceChoiceBox.getSelectedIndexQ) !=0) && 
(serviceChoiceBox.getSelectedIndex() !=-1)) && 


((squadronLocationBox.getSelectedIndex() !=0) && | 
(squadronLocationBox.getSelectedIndex() != -1)) ) 


queryServiceLocation( query ); 
else if ( ((squadronCommunityBox.getSelectedIndexQ) !=0) && 
(squadronCommunityBox.getSelectedIndexQ != -1)) && 
(squadronLocationBox.getSelectedIndex() !=0) && 
(squadronLocationBox.getSelectedIndex() != -1)) ) 
querySquadronCommunityLocation( query ); 
else if ( ((serviceChoiceBox.getSelectedIndex() !=0) && 
(serviceChoiceBox.getSelectedIndexQ !=-1)) && 
((squadronCommunityBox.getSelectedIndex() !=0) && 
(squadronCommunityBox.getSelectedIndex() != -1)) ) 
querySquadronCommunityService( query ); 
else if ( (serviceChoiceBox.getSelectedIndex() !=0) && 
(serviceChoiceBox.getSelectedIndexQ) != -1) ) 


queryService( query ); 
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else if ( (squadronCommunityBox.getSelectedIndex() =) && 
(squadronCommunityBox.getSelectedIndex() != -1) ) 


querySquadronCommunity( query ); 


else if ( (squadronLocationBox.getSelectedIndex() !=0) && 
(squadronLocationBox.getSelectedIndex() != -1) ) 


queryLocation( query ); 
else 
queryQuestion( query ); 


}//end processQuery() 


/fFunction: ° querySquadronCommunityServiceLocation() 

//Parameters: query — initial SQL statement 

//Return Type: None 

/fPurpose: Receives the initial query from processQuery()and 
concatenates the remaining SQL query to be passed 


H _ to the database in order to return the user's query. This 
// specific query returns the question number, community, 
// service and location tuple. Calls countResponses() 
// to calculate the number of tuples for this query. 
| [nnnnnnnnnnnnnnnnnnenen nnn nnn none nn nnn enn n nnn nnn n wenn nn nn nn nnn nnn nn nnn nee nnn ee enn enema nan enmnnnnaccnenemennasanannn 
public void querySquadronCommunityServiceLocation( java.lang.String query ) 
{ 
textDisplayArea.append 


("\nQuery -> querySquadronCommunityServiceLocation gf 
textDisplay Area.append 

("\nCommunity ->" + squadisquadronC ommunity POX: getSelectedIndexQ -1] ); 
textDisplayArea.append 

("\nService ->" + service[serviceChoiceBox.getSelectedIndex() -1] ) ; 
textDisplayArea.append 

("\nLocation ->" + location[squadronLocationBox.getSelectedIndex() -1] ) ; 


query += questionBox.getSelectedIndex() + 

"FROM Biographical Data INNER JOIN Questions ON " + 
"\nQuestions.Community = Biographical_Data.Community AND " + 
"\nQuestions.Squadron_Number = Biographical_Data.Squadron_Number AND " + 
"\nQuestions.Survey_Number = Biographical Data.Survey_Number WHERE " + 


"\nBiographical Data.Community =" + 
squad[squadronCommunityBox.getSelectedIndex(Q) -1] + AND "+ 

"\nBiographical_Data.Service = '" + 
service[serviceChoiceBox.getSelectedIndex() -1] + AND"+ 

"\nBiographical_Data.Location = '"" + 
location[squadronLocationBox.getSelectedIndex() -1}+ """; 


textDisplayArea.append("") ;- 
textDisplayArea.append("\nquery ->" + query ) ; 
textDisplayArea.append("") ; 
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_countResponses( query ); 


1//end querySquadronCommunityServiceLocation() 


| aE LON aa RNS A ae ee a ee Rea ee er ae ee eee Pa ree a MO Re ten 
//Function: queryServiceLocation() 

//Parameters: query - initial SQL statement 

/fReturn Type: None 

//Purpose: _ Receives the initial query from processQuery()and 


Ht. concatenates the remaining SQL query to be passed 
H to the database in order to return the user's query. This 
HI specific query returns the question number, 
// service and location tuple. Calls countResponses() 
H to calculate the number of tuples for this query. 
|] nonnnnnnneennennnnnnnn nnn n ene ennn meen nn wen anne enn nnn nnn n nanan nn nnn mann enna nennennnnamanaunennanamaniamammamaam mma 
public void queryServiceLocation( java.lang.String query ) 
textDisplayArea.append | 
("\nQuery -> queryServiceLocation ") ; 
textDisplayArea.append 
("\nService ->" + service[serviceChoiceBox.getSelectedIndexQ -1] ) ; 
textDisplayArea.append 


("\nLocation ->" + location[squadronLocationBox.getSelectedIndexQ) -1] ) ; 


query += questionBox.getSelectedIndex() + 

"FROM Biographical Data INNER JOIN Questions ON " + 

"\nQuestions.Community = Biographical_Data.Community AND " + 

"\nQuestions.Squadron_Number = Biographical’ Data.Squadron_Number AND " + 

"\nQuestions.Survey_Number = Biographical Data.Survey_Number WHERE "+ 

"\nBiographical Data.Service = ' + service[serviceChoiceBox.getSelectedIndex() -1] + 

™" AND "+ "\nBiographical_Data.Location = "+ 
location[squadronLocationBox.getSelectedIndex() -1}+ """; 


textDisplayArea.append("") ; 
textDisplayArea.append("\nquery ->" + query ) ; 
textDisplayArea.append("") ; 


countResponses( query ); 


3//end queryServiceLocation() 


| | n-nnnonnnnnenn nnn anna nennn me nen enn n nnn enennnn enema nnn nnn nnn nnnn nen nnn n nna n nnn nenn nena nena canna naman nnnennnnennanaen 
//Function: querySquadronCommunityLocation() 

//Parameters: query - initial SQL statement 

/fReturn Type: None | 

/[Purpose: Receives the initial query from processQuery()and 


// concatenates the remaining SQL query to be passed 

Hf to the database in order to return the user's query. This 

H specific query returns the question number, community, 

ff. and location tuple. Calls countResponses() 

// to calculate the number of tuples for this query. 

| [onnnnnnnnnnnn nnn nn nnn nnn nnn nn nnn nn nnn nnnn anna nnn n wanna nnannnnaewewnnernenernannsnenneanananenaananananasnasencaeenmen 
public void querySquadronCommunityLocation( java.lang.String query ) 

{ 
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textDisplayArea.append 

("\nQuery -> querySquadronCommunityLocation ") ; 
textDisplayArea.append 

("\nCommunity ->" + squad[squadronCommunityBox.getSelectedIndex() -1] di 
textDisplayArea.append 

("\nLocation ->" + location[squadronLocationBox. aa 1]); 
query += questionBox.getSelectedIndex(Q) + " 

FROM Biographical_ Data INNER JOIN Questions ON " + 
"\nQuestions.Community = Biographical_Data.Community AND " + 
"\nQuestions.Squadron_Number = Biographical_ Data.Squadron_Number AND " + 
"\nQuestions.Survey_Number = Biographical_ Data.Survey_Number WHERE " + 


"\nBiographical_Data.Community = ™ + 
_squad[squadronCommunityBox.getSelectedIndex() -1] +" AND vet 
"\nBiographical_Data.Location = ' + 
location[squadronLocationBox. Stren ie ais 
textDisplayArea.append("") ; 
textDisplayArea.append("\nquery ->" + query ) ; 
textDisplayArea.append(""") ; 
countResponses( query ); 


}//end querySquadronCommunityLocation() 


[| pnecennnecenncoenn ene neneennenenen 2 eSeReeNe AAO SR ER EEE SEMAN COENEN NNER EEEER TERN N MON RENE m ae mam meneame eee 


//Function: querySquadronCommunityService() 
//Parameters: query - initial SQL statement 

//Return Type: None 

//Purpose: Receives the initial query from srocesOne On 


// concatenates the remaining SQL query to be passed 
H to the database in order to return the user's query. This 
// ‘specific query returns the question number, community, and 
/ service tuple. Calls countResponses()to calculate 
ye the number of tuples for this query. 
| |annnnnnnnnnnn-nnneennnann nnn nnn nnn nnn enna nnn anne nn een nnn ne neennnanmnnnnnannwnnannannanananaasnaacnannaaannwneanen nnn 
public void querySquadronCommunityService( java.lang.String query ) 
{ 
textDisplayArea.append 


("\nQuery -> querySquadronCommunityService ") ; 
textDisplayArea.append 
("\nCommunity ->" + squad[squadronCommunityBox.getSelectedIndex() -1] ) ; 


textDisplayArea.append 
("\nService ->" + service[serviceChoiceBox.getSelectedIndexQ -1] ) ; 


query += questionBox.getSelectedIndex() + " 

FROM Biographical Data INNER JOIN Questions ON " + 
"\nQuestions. Community = Biographical_Data.Community AND " + 
"\nQuestions.Squadron_ Number = Biographical_ Data.Squadron_Number AND "+ 
"\nQuestions.Survey_Number = Biographical_Data.Survey_Number WHERE " + 


"\nBiographical Data.Community = ' + 
squad[squadronCommunityBox.getSelectedIndex() -1] +" AND " + 
"\nBiographical_Data.Service =" + 
service[serviceChoiceBox.getSelectedIndex() -1] + """; 


textDisplay Area.append("") : 
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textDisplayArea.append("\nquery ->" + query ); 
textDisplayArea.append("") ; 


countResponses( query ); 


}//end querySquadronCommunityService() 


| ER EN SE ee Ae eRe ee ee eee ee ee 


/fFunction: queryService() 
//Parameters: query - initial SQL statement 
//Return Type: None 
//Purpose: Receives the initial query from processQuery()and 
HI concatenates the remaining SQL query to be passed 
Hf to the database in order to return the user's query. This 
// specific query returns the question number and 
Hf service tuple. Calls countResponses() 
HI to calculate the number of tuples for this query. 
DS 
public void queryService( java.lang.String query ) 
f ; 
textDisplayArea.append 
("\nQuery -> queryService ") ; 
textDisplayArea.append | 
("\nService ->" + service[serviceChoiceBox.getSelectedIndex() -1] ) ; 


query += questionBox.getSelectedIndex() + " | 

FROM Biographical_ Data INNER JOIN Questions ON " + 
"\nQuestions.Community = Biographical_ Data.Community AND "+ 
"\nQuestions.Squadron_Number = Biographical Data.Squadron Number AND "+ 
"\nQuestions.Survey_Number = Biographical _Data.Survey Number WHERE"+ 


"\nBiographical_Data.Service =" + 
service[serviceChoiceBox.getSelectedIndex() -1] + '""; 


textDisplayArea.append("") ; 
textDisplayArea.append("\nquery ->" + query ) ; 
textDisplayArea.append("") ; 


countResponses( query ); 


}//end queryService() 


| et eRe RE ea OE REE EE Ne aa 


//Function: querySquadronCommunity() 

//Parameters: query - initial SQL statement 

/{Return Type: None 

‘Purpose: _ Receives the initial query from processQuery(Qand 


Hf concatenates the remaining SQL query to be passed 
Hf to the database in order to return the user's query. This 
Hf specific query returns the question number and community 
Hf tuple. Calls countResponses()to calculate the number of 

ff tuples for this query. 
| [na-nenennnnnnnn nnn nnn nnn nnn nnn nn nnn anne nnn anna nnn nnn nnn nner nnn nnnnnen nena anna nnn nnnm nnn nnn nen nnnnensennanees 
public void querySquadronCommunity( java.lang.String query ) 

{ 
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textDisplayArea.append 

("\nQuery -> querySquadronCommunity ") ; 
textDisplayArea.append 
("\nCommunity ->" + squad[squadronCommunityBox.getSelectediIndex() - ie 


query += questionBox.getSelectedIndex() + " 

FROM Biographical Data INNER JOIN Questions ON " + 
"\nQuestions. Community = Biographical_ Data.Community AND " + 
"\nQuestions.Squadron_Number = Biographical_Data.Squadron_Number AND " + 
"\nQuestions.Survey_Number = Biographical_Data.Survey_ Number WHERE " + 


"\nBiographical_Data.Community =" + 
squad{squadronCommunityBox.getSelectedIndex() -1] + ""; 


textDisplayArea.append("") ; 
textDisplayArea.append("\nquery ->" + query ) ; 
textDisplayArea.append("") ; 


countResponses( query ); 


}//end querySquadronCommunity() 
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//Function: queryLocation() 

//Parameters: query - initial SQL statement 

/fReturn Type: None 

/[Purpose: . Receives the initial query from processQuery()Jand 
// concatenates the remaining SQL query to be passed 


HI to the database in order to return the user's query. This 

// specific query returns the question number and location 

// tuple. Calls countResponses()to calculate the number of 

// tuples for this query. 

| ea 
public void queryLocation( java.lang.String query ) | 

{ 


textDisplayArea.append 
("\nQuery -> queryLocation ". 
textDisplayArea.append 
("\nLocation ->" + location{squadronlocationBox. getSelectedIndex() -1] ) ; 


query += questionBox.getSelectedIndex() + 

" FROM Biographical Data INNER JOIN Questions ON "+ - 
"\nQuestions.Community = Biographical_Data.Community AND " + 
"\nQuestions.Squadron_Number = Biographical_Data.Squadron_Number AND "+ 
"\nQuestions.Survey_Number = Biographical Data.Survey Number WHERE " + 


"\nBiographical. Data.Location = '™ + 
location[{squadronLocationBox.getSelectedIndexQ -1]+ """; 


textDisplayArea.append("") ; 
textDisplayArea.append("\nquery ->" + query ) ; 
textDisplayArea.append("") ; 


countResponses( query ); 
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}//end queryLocation() 


//Function: queryQuestion() 

//Parameters: query - initial SQL statement 

/fReturn Type: None 

//Purpose: _ Receives the initial query from processQuery()and 


H concatenates the remaining SQL query to be passed 
H to the database in order to return the user's query. This 
/ specific query returns the question number tuple. 
“Hf Calls countResponses()to calculate the number of 
// tuples for this query. 
Ws wdestte a ae Saas ces asec acon sae nunoecensantenseccaxaumaisessacseeeuscntiansnanasacaeaetansmacseutlersaecrmsuaases 


public void queryQuestion( java.lang.String query ) 
{ 
textDisplayArea.append("\n Query -> queryQuestion ") ; 


query += questionBox.getSelectedIndexQ + " FROM Questions " ; 
textDisplayArea.append("") ; _ 
textDisplayArea.append("\nquery ->" + query ) ; 
textDisplayArea.append("") ; 


countResponses( query ); 


3//end queryQuestion() 


[[aanmewnenmnnananeeemewnwrnnnnnen enn n nnn nnn nna n een ee enn neem wnnnnnnmnnemnsennnanenseeeeeneeeneeeeeneeenennesesenan 


//Function: countResponses() 

//Parameters: query — the completed SQL query, ready to be executed 
/fReturn Type: None 

//Purpose: Receives and executes the specific database query. Counts 


/I each individual result tuple recording the number of 
i] records in each category. Counts the total number 
// of records received in num Total. 
|| nnnnnnnnnnnnnnnnnn anne nnn nnn ween enn e nnn nnn enn een nn nn eneen nner eran nen e er ennnna nee nerenn ene nn nnn annnnnnnnnnnnn nnn nnen 
public void countResponses( java.lang.String query ) 
{ 
try{ 


ResultSet rs = stmt.executeQuery( query ); ; 


//initialize variables for multiple queries 
numTotal =0; 

numDisagree =0; 

numNeutral =0; 

numAgree =0; - 

numNotApplicable =0; 

rowCount =0; 


while (rs.nextQ)) { 
int x = rs.getInt(1); 
if ((x >=0) && (x = 2)) 
numDisagree++; 
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else if (x == 3) 
numNeutral++; 

else if (x >3 ) 
numAgree++; 

else if (x ==-1) 
numNotApplicable++; 

rowCount++; 

}//end while 


num Total = (numDisagree + numNeutral + numAgree + numNotApplicable); 
rs.close(); 


catch (Exception e) { 
textDisplayArea.appendText(e.toString()); 


}//countResponses() 


//Function: calculateDisplayColumns() 

//Parameters: None 

//Return Type: None 

/fPurpose: Each display column is calculated and displayed by pixels. 
/ Performs floating point division to calculate the ratio of _ 


If each column height, then multiplies this value by PERCENT 
Hf and PIXEL FACTOR to obtain each display column height 
/ in pixels. Since the (0,0) starting coordinate for each 
H display in the upper right of each monitor the Y_coordinate 
H for each display column is calculated by subtracting the 
calculated column pixel height and DISPLAY_OFFSET from 
// the full (100%) COLUMN_HEIGTH. 
|| nnennnnn-neneennnnannnnn ween ewe nnnnnnnnnnnnnn nnn nn en eee nnn n senna nnn nnn nena nnn en eran enamannnnnnnnasacenamemnmmm es 
public void calculateDisplayColumns() 
f | 


//calculating display percent label values 

disagreePercent = ((float)numDisagree/(float)num Total) * PERCENT; 
neutralPercent = ((float)numNeutral/(float)num Total) * PERCENT; 
agreePercent = ((float)numA gree/(float)ynumTotal) * PERCENT ; 
notAppPercent =((float)numNotA pplicable/(float)num Total) * PERCENT ; 


//calculating the heigth of each display column in pixels 
disagreePixelHeight = 
((float)numDisagree/(float)num Total) * PERCENT * PIXEL FACTOR ; 
neutralPixelHeight = 
((float)numNeutral/(float)numTotal) * PERCENT * PIXEL FACTOR ; 
agreePixelHeight = | 
((float)ynumA gree/(float)ynumTotal) * PERCENT * PIXEL FACTOR ; 


notAppPixelHeight = 
ice num Noe ppHcapissscainum ret) * PERCENT * PIXEL F ACTOR; 


//calculating the starting pixel y-coordinate for each display column 

Y_coordDisagree = COLUMN_HEIGHT - (int)disagreePixelHeight + DISPLAY_OFFSET; 
Y_coordNeutral = COLUMN_HEIGHT - (int)neutralPixelHeight + DISPLAY _OFFSET; 

Y _coordAgree = COLUMN _ _HEIGHT - (int)agreePixelHeight + DISPLAY | OFFSET; 

Y coordNotApp = COLUMN_HEIGHT - (int)notAppPixelHeight + DISPLAY | OFFSET; 
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}//end calculateDisplayColumns() 


Uae la eps a eS a Se a a 
//Function: — displayTroubleshootingData() 

//Parameters: None 

//Return Type: None 

//Purpose: _ For use with the normally hidden display text box. Used 


H for troubleshooting only. 
||ornnnnnewewnwwnnneenwennnnnwnnnaneeennennaenn nan nannneenanennnnannnnwnennnnannnaneeneananeenanane nan aaea ana nannnan 
public void displayTroubleShootingData() 

{ 
textDisplayArea.append("\nThe number of disagree ---------> " + numDisagree); 
textDisplayArea.append("\nThe number of neutral ---------- > "+ numNeutral); 
textDisplayArea.append("\nThe number of agree ------------> " + numAgree); 


textDisplayArea.append("\nThe number of notApplicable ----> " + numNotApplicable); 
textDisplayArea.append("""); 
textDisplayArea.append("\nCheck values: rowCount ---------> " + rowCount); 


textDisplayArea.append("""); 

textDisplayArea.append("\n disagreePercent-> " + (int)disagreePercent); 
textDisplayArea.append("\n neutralPercent--> " + (int)neutralPercent); 
textDisplayArea.append("\n agreePercent----> " + (int)agreePercent); 
textDisplayArea.append("\n notAppPercent---> " + (int)notAppPercent); 


}//displayTroubleShootingData 


//Function: closeConnection() 
//Parameters: None 
//Return Type: None 
//Purpose: __ Frees any shared resources called by | 
H SubmitQueryButton_MousePressed when the data has been 
H returned from the database. | | 
[[onnncnwncanennnnancoweuccwnunannawecenneseeen nana nnn nnm enna nana nen nannnenneeenaneaanennen nan cnwennasanenenenemeemee 
public void closeConnection() | 
{ 
try{ 
con.close(); 
stmt.closeQ); 


j 
catch (java.sql. SQLException e){ 
textDisplayArea.appendText(e.toString()); 


}// end closeConnection 


}//end class SymItem implements java.awt.event.ItemListener 
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APPENDIX D. SURVEY HYPERTEXT MARKUP LANGUAGE (HTML) SOURCE CODE 


A. A BRIEF HISTORY AND BACKGROUND. 


Tim Berners-Lee developed the Hypertext Transport Protocol (HTTP) 
in late 1990 while he was working at CERN, the European Particle 
Physics Laboratory located in Geneva, Switzerland. HTTP is a 
universally accessible communications method that can support a wide 
range of media types over TCP/IP packet-switching networks. 

But it wasn't until 1994, when the National Center for 
Supercomputing Applications (NCSA) released their Mosaic web browser, 
that HTML, the markup language used for transferring information via 
HTTP, began to blossom and enjoy widespread use. As the number of web 
page authors and vendors began to grow exponentially, the need for an 
HTML specification maintained by an independent vendor-neutral 
organization became necessary. In October 1994, the World Wide Web 
Consortium (W3C) became that organization, and it continues today to 
lead the World Wide Web to its full potential by developing common 
protocols that promote its evolution and ensure its interoperability 
[Ref. 29]. | 

The Consortium attempts to find common specifications for the Web so 
that private organizations can work in their own fields to exploit and 
build on top of the global information space which is the web [Ref. 
29]. The W3C's goals are threefold: 

e Provide a repository of information about the World Wide Web 

(WWW) for developers and users, especially specifications about 


the Web. The three specifications that make the Web work are: 












Purpose 


| 
A uniform naming scheme for locating resources on the web. 
| A protocol for accessing named resources over the web. 


Hypertext A means of producing web-based documents that allows for easy navigation among 
resources. 


Table D.1. Worid Wide Web (WWW) components. For more information on 


these components, see [http://www.w3.org/TR/PR-htm140/intro/intro.htm]] . 


e Provide sample code implementations to embody and promote 





standards. 
e Provide various prototypes and sample applications to demonstrate 


the use of new technology [Ref. 29]. 
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The Consortium is a neutral forum, where no member has a greater say 
than any other. As of October 1998, it was funded by 287 member 
organizations, which join at an annual cost of $50,000 USD Gabel 


membership) or $5,000 USD (affiliate membership). A list of the current 


members can be found at [http:/Avww.w3.org/Consortium/Member/List.html} . 


B. WHAT IS HTML? 
The WWW is clearly a simple and inexpensive means for businesses 


to distribute many different forms. of digital data, but in order to 
effectively and efficiently do so, the material needs to be presented 
in a common format. This format, or more properly specification, is 
known as HTML. HTML is a Standard Generalized Mark-up Language (SGML) 
derivative (i.e. it conforms to International Standard ISO 8879, which 
requires a well-defined document structure, a relationship between the 
document's parts, and a means of checking the document for validity 
against a Document Type Definition (DTD)). It is a non-proprietary 
specification that is used to publish hypertext on the WWW. HTML can be 
created and processed in a wide range of tools, from simple plain text 
editors to sophisticated What You See Is What You Get (WYSIWG) 


authoring tools such as Microsoft FrontPage [Ref. 30]: 


PeererePercir tee tether rire trt eee teeter etree rect iirctrctlerrserirocira! 


age Express - [Untitled Normal Page] 





Figure D.1. Microsoft FrontPage (Express version). 
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HTML is a markup language, not a programming language, which 
gives authors the ability to: 


e Publish documents to the Internet in a platform independent 
format. Documents can include a wide variety of embedded 
elements, such as music, tables, forms, graphics, videos, 
lists, etc... These elements, in turn, have numerous 
attributes that change their presentation style. 


-@ Retrieve information online via hypertext links. 
e Link to non-WWW information resources on the Internet. 
e Develop applications that can be used for almost any purpose. 


Although it was originally intended as a means of encoding document 
structures, the HTML specification has evolved to incorporate many new 
tags that apply to other text structures, such as headings, paragraphs, 
and tables. To use HTML, the author must understand the concept of 
markup - what it is and how it is done. | 

Markup is the act of inserting additional text into a document 
that is not usually visible to the reader, and is not part of the 
content, but enhances the document in some way. [Ref. 30}. The 
additional text that is inserted are tags, which convey formatting 
information to the browser. The browser can then decide how to display 
the document's’ content. HTML has two types of markup: fags and character 
entities. 

Tags are constructed of a pair of brackets ("<" and ">"), between 
which the tag is placed. They are used around segments of text, so 
there is usually a companion end tag which is identical to the start 
tag except it includes a forward slash [{Ref. 30]. Here is an example of 


document markup and the use of tags: 


>: <HTML> 
: <HEAD> 
: <TITLE>My Grocery List</TITLE> 
: </HEAD> 

<BODY> 


My Grocery List 
<UL> 


A : <LI>Bananas 
<LI>Grapes 
: <LI>Apples 
: <LI>Oranges , 
: <LI> &#188&nbsplI'd rather go to McDonald's&nbsp&#189 





Figure D.2. Raw HTML code. 


169 


When viewed in a web browser (such as Netscape Navigator or Microsoft 


Internet Explorer), we observe that the markup tags are not visible: 


My Grocery List 


e Bananas 
e Grapes 

.© Apples 

e Oranges 
e 4% ]'drather go to McDonald's % 





_Figure D.3. My Grocery List. The tags are invisible to the client.. 
When encoding requires the use of special characters (e.g., 
international characters, mathematical symbols, or Greek letters, SGML 
entity references may be used. These references may appear in two 

forms: 

e Numeric character references (either decimal or hexadecimal). 
Syntax: "&#D", where D is a decimal number that refers to the 
Unicode character number D. | | 

e Character entity references. 

Syntax: "&#xXH" or "s#XH", where H is a hexadecimal number that 

refers to the Unicode hexadecimal character number H. 
Notice on Line 12 of Figure D.3 the text "&#188" and "&#189". These 
numeric character references represent the fractions one-quarter and 
one-half respectively. A complete list of characters can be found at 
[http://www.w3.org/TR/PR-htm140/sgm//entities.htm!] . 

As the HTML specification continues to change, new elements and 
attributes are added. These additions make authoring easier, and web. 
pages become more robust by allowing a greater set of user 


interactions. HTML version 4.0 is the most recent specification, and in 
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addition to the text, multimedia, and hyperlink features of previous 
HTML versions, it supports more multimedia options, scripting 
languages, style sheets, better printing facilities, and documents that 


are more accessible to uses with disabilities [Ref. 29]. 


Ca SURVEY HTML CODE 


<html> 
<head> 
<meta http-equiv="Content-Type" 
content="text/html; charset=iso-8859-1"> 
<meta name="keywords" 
content="USN, United States Navy, Navy, Aviation, Safety, 
Aviation Safety, Naval Aviation"> 
<meta name="description" 
content="The Aviation Safety School automated Command Assessment 
Survey Questionnaire. Naval aviation units can use this HTML page, or our J ava-enabled 
pages to submit survey results."> 
<meta name="GENERATOR" content="Microsoft FrontPage Express 2.0"> 
<title>Aviation Safety Questionnaire</title> 
</head> 
<body background="images/denim j jpg"> 
<script language="javascript" src="javascript/checksurvey.js"> 
</script> i 
<div align="center"><center> 
<table border="0" width="95%"> 
<tr> 
<td width="33%"><p align="center"><img 
src="images/ind-deck.gif" 
alt="ind-deck. gif (20333 bytes)" width="175" height="132"></p> 
</td> 
<td width="43%"><p align="center"><font color="#FFFF00" 
size="5"><strong>A VIATION COMMAND SAFETY ASSESSMENT 
(ACSA)<br> 
QUESTIONNAIRE FORM <’strong></font></p> 
</td> 
<td width="43%"><p align="center"><img 
src="images/ind-strn.gif” 
alt="ind-strn. git (161 15 bytes)" width="175" height="125"></p> 
</td> | 
</tr> 
</table> 
</center></div> 
<form action="http://spitfire. asatens nps.navy.mil:8080/servlet/SurveyServlet" 
method="post” name="survey" onsubmit="return check_form();"> 
<input type="hidden" name="squadron_number" value><input 
type="hidden" name="survey_number"” value><blockquote> 
<p align="center"><!--webbot bot="ImageMap” startspan 
rectangle=" (1,5) (52, 38) http://spitfire.avsafety nps.navy.mil/Help/Help.html##_blank" 
src="images/help.gif” border="0" width="53" height="39" --><MAP 
NAME="FrontPageMap0"><AREA SHAPE="RECT" COORDS="1, 5, 52, 38" 
HREF="http://spitfire.avsafety.nps.navy.mil/Help/Help.htm]" TARGET="_blank"></MAP><img 
src="images/help.gif" border="0" width="53" height="39" nsemap =P branthase Map iment 
bot="ImageMap" i-checksum="53268" endspan --></p> 
<p align="center"><font color="#F9CE06" size="4"><strong>PART 
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I. &nbsp; BIOGRAPHICAL INFORMATION</strong></font></p> 
<p align="left"><font color="#F9CE06"><strong>The 
following items are intended to aid our analysis of your 
responses.&nbsp; The analyses will be made only on groups 
which are sufficiently large to protect individual and 
organizational anonymity.&nbsp; NO attempt will be made 
to identify individual respondents or their 
organizations.&nbsp; Please select the most appropriate 
response. </strong></font></p> 
</blockquote> 
<div align="center"><center><table border="0" celispacing="4" 
width="64%"> | 
<tr> 
<td width="36%"><p align="right"><font 
color="#FFFFFF" size="4">Y our rank</font></p> 
</td> | 
<td width="64%"><p align="left"><select name="rank" 
size="|"> | 
<option value="X">Select from the following:</option> 
<option value="0">O1 - 03</option> 
<option value="1">O04 - 06</option> 
<option value="2">06 - O 10</option> 
<option value="3">CWO1 - CWO5</option> 
</select></p> 
</td> 
</tr> 
<tr> 
<td width="36%"><p align="right"><font 
color="#FFFFFF" size="4">Y our designation</font></p> 
</td> 
<td width="64%"><select name="designation” size="1"> 
<option value="X">Select from the following:</option> 
<option value="Pilot">Pilot</option> 
<option value="NFO">NFO</option> 
<option value="Other">Other</option> 
</select></td> 
</tr> 
<tr> 
<td width="36%"><p align="right"><font 
color="#FFFFFF" size="4">Your community </font></p> 
</td> 
<td width="64%"><select name="community” size="1"> 
<option value="X">Select from the following:</option> 
<option value="HC">HC</option> 
<option value="HCS">HCS</option> 
<option value="HM">HM</option> 
<option value="HMH">HMH</option> 
<option value="HMT">HMT</option> 
<option value="HS">HS</option> 
<option value="HSC">HSC</option> 
<option value="HSL">HSL</option> 
<option value="VAQ">VAQ</option> 
_ <option value="VAW">VA W</option> 
<option value="VF">VF</option> 
<option value="VFA">VFA</option> 
<option value="VMAQ">VMAQ</option> 
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<option value="VMFA">VMFA</option> 
<option value="VP">VP</option> 
<option value="VQ">VQ</option> 
<option value="VR">VR</option> 
<option value="VRC">VRC</option> 
<option value="VS">VS</option> 
<option value="VT">VT</option> 
<option value="VX">VX</option> : 
<option value="OTHER">OTHER</option> 
</select></td> 
</tr> 
<tr> | 
_ <td width="36%"><p align="right"><font 
color="#FFFFFE" size="4">Your total flight hours</font></p> 
</td> | 
<td width="64%"><input type="text" size="10" 
name="flight_hours"></td> 
</tr> 
<tr> 
<td width="36%"><p align="right"><font 
color="#FFFFFF" size="4">Hours in type</font></p> 
</td> 
<td width="64%"><input type="text” size="10" 
name="type_hours"></td> 
</tr> 
<tr> 
<td width="36%"><p align="right"><font 
color="#FFFFFF" size="4">Are you currently a 
department head?</font></p> 
</td> 
<td width="64%"><select name="department_head” 
size="]"> 
<option value="X">Select from the following:</option> 
<option value="Yes">Yes</option> 
<option value="No">No</option> 
</select></td> 
</tr> 
<tr> 
<td width="36%"><p align="right"><font 
color="#FFFFFF" size="4">Your status</font></p> 
</td> 
<td width="64%"><select name="status" size="1"> 
<option value="X">Select from the following</option> 
<option value="Regular">Regular</option> 
<option value="Active Reserve">Active Reserve</option> 
<option value="Drilling Reserve">Drilling Reserve</option> 
</select></td> 
</tr> 
<tr> 
<td width="36%"><p align="right"><font 
color="#FFFFFF" size="4">Y our service</font></p> 
</td> | 
<td width="64%"><select name="service" size="1"> 
<option value="X">Select from the following:</option> 
<option value="USN">USN</option> 
<option value="USMC">USMC</option> _ 
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<option value="Other">Other</option> 
</select></td> 
</tr> 
<tr> 
<td width="36%"><p align="right"><font 
color="#FFFFFF" size="4">Your unit's location</font></p> 
</td> 
<td width="64%"><select name="location" size="1"> 
<option value="X">Select from the following:</option> 
<option value="East Coast">East Coast</option> 
<option value="West Coast">West Coast</option> 
<option value="Other">Other</option> 
</select></td> 
</tr> 
</table> | 
</center></div><blockquote> 
<p align="center"><font color="#F9CE06" size="4"><strong>PART 
II. &nbsp; SURVEY QUESTIONNAIRE</strong></font></p> 
<p align="left"><font color="#F9CE06"><strong>Y our honest 
and candid responses to the questionnaire items that 
follow will help your command to make an accurate 
assessment of its safety climate and to estimate the 
success of its ongoing safety program.</strong></font></p> 
</blockquote> 
<p align="center"><font color="#FFFF00" size="4" 
face="Bookman Old Style"><strong>A. PROCESS</strong></font></p> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>1.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">My command conducts adequate 
reviews and updates of safety standards and operating 
procedures.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
_ style="border-bottom: medium none"><p align="center"><select 
name="question1" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Shghtly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="N">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> ? 
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<td width="11%" bgcolor="#C0C0OCO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>2.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0COCO0" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command uses an internal 
audit and hazard reporting system to catch any 
problems that may lead to a mishap</font><font 
color="#000000">.</font></td> 
<td align="center" width="34%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question2" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
_ <option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 

_ $tyle="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>3.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">My command has a defined 
process to set training goals and to review 
performance.</font></td> 
<td align="center" width="34%" becolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question3" size="|"> 

<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
. <div align="center"><center><table border="0" width="100%"> 
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<tr> 
<td width="11%" bgcolor="#COCOCO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>4.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#COCOCO0" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command closely monitors 
proficiency and currency standards to ensure aircrew 
are qualified to fly.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question4" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> . 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>5. </strong></font></p> 
</td> 
<td align="center” width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Command leadership is 
actively involved in the safety program and 
management of safety matters.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question5" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
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<tr> 
<td width="11%" bgcolor="#C0C0CO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>6.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0C0CO" 
style="border-bottom: medium none"><font size="4">My 
command has a defined process to effectively manage 
the high-risk aviator.</font></td> | 
<td align="center" width="34%" bgcolor="#C0C0CO0" 
style="border-bottom: medium none"><p align="center"><select 
name="question6" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF” size="4" face="Times New Roman"><strong>7.</strong></font></p> 
</td> ; 
<td align="center” width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Human Factors Councils have 
been successful in identifying aircrew members who 
pose a risk to safety.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question7"” size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> : 
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<td width="11%" bgcolor="#C0CO0CO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>8.</strong></font></p> 
</td> — | 
<td align="center" width="55%" bgcolor="#C0C0OCO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">Human Factors Boards have 
been successful reducing chances of an aircraft 
mishap due to high-risk aviator.</font></td> 
<td align="center” width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question8" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> . 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>9.</strong></font></p> 
</td> | 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">My command makes effective 
use of the flight surgeon to help identify and manage 
high-risk personnel.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question9” size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><p align="center"><font color="#FFFF00" 
size="4" face="Bookman Old Style"><strong>B. REWARD SYSTEM 
. AND SAFETY CULTURE</strong></font></p> 
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<div align="center"><center><table border="0" width="100%"> 
(<tr> 
<td width="11%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>10.</strong></font></p> 
</td> | 
<td align="center” width="55%" bgcolor="#C0C0CO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">Command leadership 
encourages reporting safety discrepancies without the 
fear of negative repercussions.</font></td> 
<td align="center” width="34%" bgcolor="#COC0CO" 
style="border-bottom: medium none"><p align="center"><select 
name="question10" size="1"> | 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>1 1.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Individuals in my command 
are willing to report safety violations, unsafe 
behaviors or hazardous conditions.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question11"” size="1"> | 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> | 
</td> 
</tr> 
</table> 
</center></div><hr> 
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<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COC0CO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>12.</strong></font></p> 
</td> 
<td align="center” width="55%" bgcolor="#COCO0CO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">In my command, peer 
influence is effective at discouraging violations of 
standard operating procedures, or safety rules.</font></td> 
<td align="center" width="34%" bgcolor="#CO0C0CO" 
style="border-bottom: medium none"><p align="center"><select 
name="question12" size="1"> . 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 7 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>13. </strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">In my command, we believe 
safety is an integral part of all flight operations.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question13" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Ppp ucableopucn* 
</select></p> 
</td> 
</tr> 
' </table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
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<tr> 
<td width="11%" bgcolor="#C0C0CO" 

_ gtyle="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong> 14.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0C0CO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">In my command, anyone who 
intentionally violates standard procedures, or safety 
rules, is swiftly corrected.</font></td> 
<td align="center" width="34%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question14" size="1"> 

<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 

<tr> 
<td width="11%" bgcolor="#808000" | 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>15.</strong></font></p> 
</td> 7 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">In my command, violations of 
operating procedures, flying regulations, or general 
flight discipline are rare.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question 15" size="1"> 

<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
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<tr> 
<td width="11%" bgcolor="#COC0CO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>16.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0C0CO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">Leaders in my command 
encourage everyone to be safety conscious and to 
follow the rules.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question16" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> : 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>17.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">In this command, an aviator 
who persistently violates flight standards and rules 
will seriously jeopardize his/her career.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question17" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> , 
<div align="center"><center><table border="0" width="100%"> 
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<tr> 
<td width="11%" bgcolor="#CO0COCO" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>18. </strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0C0CO0" 
style="border-bottom: medium none"><font 
color="#000000" size="4">I am not comfortable 
reporting a safety violation, because people in my 
command would react negatively toward me.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question18" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><p align="center"><font color="#FFFF00" 
size="4" face="Bookman Old Style"><strong>C. QUALITY </strong></font></p> 
<div align="center"><center><table border="0" width="100%"> | 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>19.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">My command has a reputation 
for high-quality performance.</font></td> 
<td align="center” width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question19" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
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<tr> 
<td width="11%" bgcolor="#CO0C0CO0" 
style="border-bottom: medium none"><p signe caniep efor 
color="#000000" size="4" face="Times New ; Roman"><strong>20.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command sets high quality 
standards and strives to maintain quality control.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question20" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>21 <Istrong><Ifont></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">My command closely monitors | 
quality and corrects any deviations from established 
quality standards.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question21" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> | 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
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<td width="11%" bgcolor="#C0COCO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>22.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#COC0CO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">Quality standards in my 
command are clearly stated in formal publications and 
procedural guides.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO0" 
-_style="border-bottom: medium none"><p align="center"><select 
name="question22" size="1"> | 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> , 
</td> 
</tr> 
</table> 
</center></div><p align="center"><font color="#FFFF00" 
size="4" face="Bookman Old Style"><strong>D. RISK MANAGEMENT</strong></font><font 
color="#FFFF00"><strong><br> 
</strong></font></p> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>23.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Command leaders permit 
cutting comers to get a job done.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question23”" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> — 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> | 
</table> 
</center></div><hr> 
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<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COC0CO" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>24.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#COC0CO" 
style="border-bottom: medium none"><font _ 
color="#000000" size="4">Lack of experienced 
personnel has adversely affected my command's ability 
to operate safely.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question24" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> - 
</table> 
</center></div><hr> | 
<div Be eee ree ni border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>25.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Safety decisions are made at 
the proper levels, by the most qualified people in my 
command.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question25" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
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<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#C0C0OCO" 
style="border-bottom: medium none"><p align="center"><font : 
color="#000000" size="4" face="Times New Roman"><strong>26. </strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0C0C0" 
style="border-bottom: medium none"><font 
color="#000000" size="4">Command leaders consider 
safety issues during the formation and execution of 
operational and training plans.</font></td> 
<td align="center" width="34%" bgcolor="#C0OC0CO0" 
style="border-bottom: medium none"><p align="center"><select 
name="question26" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
- <option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> | 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>27.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Command leadership has a 
clear picture of the risks associated with its flight 
operations.</font></td> 
<td align="center" width="34%" bgecolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question27" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> — 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
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<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COCOCO0" 
style="border-bottom: medium none"><p align="center"><font : 
color="#000000" size="4" face="Times New Roman"><strong>28.</strong></font></p> 
</td> 
<td align="center” width="55%" bgcolor="#C0CO0C0” 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command takes the time to 
identify and assess risks associated with its flight 
operations.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question28”" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>29.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">My command does a good job 
managing risks associated with its flight operations.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p So 
name="question29" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> : 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
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<tr> 
<td width="11%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>30.</strong></font></p> 
</td> 
<td align="center” width="55%" bgcolor="#C0C0CO0" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command has increased the 
chances of a mishap due to inadequate or incorrect 
risk assessment.</font></td> 
<td align="center" width="34%" bgcolor="#COC0CO" 
style="border-bottom: medium none"><p align="center"><select 
name="question30" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> : 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>3 1.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">I am provided adequate 
resources (time, staffing, budget, and equipment) to 
accomplish my job.</font></td> 
<td align="center” width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question31" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div Se eR eee border="0" width="100%"> 
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<tr> 
<td width="11%" bgcolor="#CO0C0CO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>32.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command provides the 
right number of flight hours per month for me to fly 
safely.</font></td> 
<td align="center" width="34%" bgcolor="#CO0CO0CO" 
style="border-bottom: medium none"><p align="center"><select 
name="question32" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> : 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>33.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">I have adequate time to 
prepare for and brief my flights.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question33” size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
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<td width="11%" bgcolor="#COCOCO" 
‘ __ style="border-bottom: medium none"><p align="center"><font ' 
color="#000000" size="4" face="Times New Roman"><strong>34.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#COC0CO0" 
style="border-bottom: medium none"><font 
color="#000000" size="4">Based upon my command's 
personnel and other assets, the command is 
over-committed.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question34" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 

</sélect></p> | 

</td> 

</tr> 

</table> 

</center></div><hr> 

<div align="center"><center><table border="0" width="100%"> 

<tr> , 
- <td width="11%" bgcolor="#808000" | 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>35.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">My command has i as 
Operational Risk Management processes in 
decision-making at all levels.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question35" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 

</select></p> 

</td> 

</tr> 

</table> 

</center></div><hr> 

<div align="center"><center><table border="0" width="100%"> 

<tr> 
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<td width="11%" bgcolor="#C0C0CO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>36. </strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#COC0CO0" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My supervisor can be relied 
on to keep his/her word.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question36" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>37.</strong></font></p> 
</td> | . 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Our command leaders and 
supervisors can be trusted.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question37" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> | 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><font 
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color="#000000" size="4" face="Times New Roman"><strong>38. </strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command's Safety Officer 
is highly regarded.</font></td> 
<td align="center" width="34%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question38" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> : 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>39.</strong></font></p> 
</td> | | 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Our Safety Officer is 
influential in promoting safety.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question39" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COCOCO" 
‘style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>40. </strong></font></p> 
</td> 
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<td align="center" width="55%" bgcolor="#COCO0CO0" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command is genuinely 
concerned about safety.</font></td> 
<td align="center" width="34%" bgcolor="#COCO0CO" 
style="border-bottom: medium none"><p align="center"><select 
name="question40" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not a 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFE" size="4" face="Times New Roman"><strong>41.</strong></font></p> 
</td> 
<td align="center” width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Command leadership 1s 
successful in communicating its safety goals to unit 
personnel.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p a a aa 
name="question41” size="1"> 
<option value="X">Select from the following: </option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>42.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0C0CO0" 
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style="border-bottom: medium none"><font 
color="#000000" size="4">My command provides a 
positive command climate that promotes safe flight 
operations.</font></td> 
<td align="center" width="34%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question42” size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%'"> 
<tr> : 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>43. </strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Command leadership is 
actively involved in the safety program and 
management of safety matters.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none align="center"><select 
name="question43” size="1"> 
<option value="X">Select from the following:</option> 
_ <option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 7 
<td width="11%" bgcolor="#COCOCO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>44.</strong></font></p> _ 
</td> 
<td align="center" width="55%" bgcolor="#C0C0CO0" 
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style="border-bottom: medium none"><font 
color="#000000" size="4">Command leadership sets the 
example for compliance with flight standards.</font></td> 
<td align="center" width="34%" bgcolor="#C0C0CO" 
style="border-bottom: medium none"><p align="center"><select 
name="question44" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> | 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>45. </strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">My command ensures that all 
unit members are responsible and accountable for safe 
flight operations.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question45" size="1"> 
<option value="X">Select from the following: </option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> : 
- <td width="11%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>46.</strong></font></p> 
</td> | 
<td align="center" width="55%" bgcolor="#C0C0CO" 
style="border-bottom: medium none"><font 
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color="#000000" size="4">Command leadership willingly 
assists in providing advice concerning safety 
matters.</font></td> | 
<td align="center" width="34%" bgcolor="#CO0C0CO0" 
style="border-bottom: medium none"><p align="center"><select 
name="question46" size="1"> | 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
. <option value="1">Moderately Disagree</option> 
- <option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> ¢ 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> | 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="4FFFFFF" size="4" face="Times New Roman"><strong>47.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Command leadership reacts — 
well to unexpected changes to its plans.</font></td> 
<td align="center” width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question47" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> | 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#C0C0C0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>48.</strong></font></p> 
</td> 
<td align="center” width="55%" bgcolor="#COC0CO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command does not hesitate 
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to temporarily restrict from flying individuals who 
are under high personal stress.</font></td> 
<td align="center" width="34%" bgcolor="#COC0CO" 
style="border-bottom: medium none"><p align="center"><select 
name="question48" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" ee anes New Roman"><strong>49. </strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">I am adequately trained to 
safely conduct all of my flights.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question49" size="1"> 
<option value="X">Select from the following: <foption> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> : 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%'"> 
<tr> , 
<td width="11%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><p align="center"><font - 
color="#FFFFFF" size="4" face="Times New Roman"><strong>50.</strong></font></p> 
</td> | 
<td align="center" width="55%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">Morale and motivation in my 
command are high.</font></td> 
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<td align="center" width="34%" bgcolor="#C0C0CO0" 
style="border-bottom: medium none"><p align="center"><select 
name="question50" size="1"> 

<option value="X">Select from the following:</option> 

<option value="0">Strongly Disagree</option> 

<option value="1">Moderately Disagree</option> 

<option value="2">Slightly Disagree</option> 

<option value="3">Neutral</option> 

<option value="4">Slightly Agree</option> 

<option value="5">Moderately Agree</option> 

<option value="6">Strongly Agree</option> 

<option value="-1">Not Applicable</option> 

_</select></p> 

</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>S5 1.</strong></font></p> 
</td> 
<td align="center” width="55%" bgcolor="#8038000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">My command ensures the 
uniform enforcement of all operating standards among 
unit members.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question51" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COCO0CO" 

- style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>52. </strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">Crew rest standards are 
enforced in my command.</font></td> 
<td align="center" width="34%" bgcolor="#C0C0CO0" 
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style="border-bottom: medium none"><p align="center"><select 
name="question52" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom:. medium none"><p align="center”><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>53.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">In my command, NATOPS tests 
and check rides are conducted as intended, to 
candidly assess aircrew qualifications.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question53" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> | 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COC0CO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>54.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command provides adequate 
safety backups to catch possible human errors during 
_ high-risk missions.</font></td> | 
<td align="center" width="34%" bgcolor="#COCOCO" 
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style="border-bottom: medium none"><p align="center"><select 
name="question54" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%'"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>55.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Within my command, good 
communications flow exists up and down the chain of 
command.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question55" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
‘<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#C0C0CO" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>56.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#C0C0CO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command has good two-way 
communication with external commands.</font></td> 
<td align="center” width="34%" bgcolor="#C0C0CO0" 
style="border-bottom: medium none"><p align="center"><select 
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name="question56" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> | 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>57.</strong></font></p> 
</td> 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">Safety education and 
training are adequate in my command.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question57" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> | 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>58.</strong></font></p> 
</td> | 
<td align="center" width="55%" bgcolor="#COCOCO" 
style="border-bottom: medium none"><font 
color="#000000" size="4">The Safety Department is a 
well-respected element of my command.</font></td> 
<td align="center" width="34%" bgcolor="#C0COCO" 
style="border-bottom: medium none"><p align="center"><select 
name="question58" size="1"> 
<option value="X">Select from the following:</option> 
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<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width=" 100%"> 
<tr> . . 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>59.</strong></font></p> 
</td> . 
<td align="center" width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#FFFFFF" size="4">The Aviation Safety Officer 
position is a sought after billet in my command.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question59" size="1"> 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> : 
| </td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#COCOCO0" 
style="border-bottom: medium none"><p align="center"><font 
color="#000000" size="4" face="Times New Roman"><strong>60.</strong></font></p> 
</td> | | 
<td align="center" width="55%" bgcolor="#COC0CO0" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command's Safety 
Department keeps me well informed regarding important 
safety information.</font></td> 
<td align="center" width="34%" bgcolor="#C0C0CO0" 
style="border-bottom: medium none"><p align="center"><select 
name="question60" size="1"> | 
<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
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<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> 
<option value="-1">Not Applicable</option> 
</select></p> | 
</td> 
</tr> 
</table> 
</center></div><hr> 
<div align="center"><center><table border="0" width="100%"> 
<tr> 
<td width="11%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><font 
color="#FFFFFF" size="4" face="Times New Roman"><strong>61.</strong></font></p> 
</td> ae 
<td align="center” width="55%" bgcolor="#808000" 
style="border-bottom: medium none"><font 
color="#000000" size="4">My command's Aircrew 
Coordination Training program is helping to improve 
mission performance and safety.</font></td> 
<td align="center" width="34%" bgcolor="#808000" 
style="border-bottom: medium none"><p align="center"><select 
name="question61" size="1"> 
‘<option value="X">Select from the following:</option> 
<option value="0">Strongly Disagree</option> 
<option value="1">Moderately Disagree</option> 
<option value="2">Slightly Disagree</option> 
<option value="3">Neutral</option> 
<option value="4">Slightly Agree</option> 
<option value="5">Moderately Agree</option> 
<option value="6">Strongly Agree</option> — 
<option value="-1">Not Applicable</option> 
</select></p> | 
</td> 
</tr> 
</table> 
</center></div><p align="center">&nbsp;</p> | 
<div align="center"><table border="0" width="100%"> 
<tr> 
<td width="50%"><center><input 
type="submit" name="submit" value="Submit"> 
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </p></center> 
</td> 
<td width="50%"><center>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
<input type="reset" name="reset" value=" Reset "> </td></center> 
</tr> 
</table> 
</div><div align="center"><center><table border="0" 
width="100%"> 
<tr> 
<td><p align="center"><!--webbot bot="ImageMap" 
startspan | 
rectangle=" (1,5) (52, 38) http://spitfire.avsafety.nps.navy.mil/Help/Help.html## blank" 
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src="images/help.gif” border="0" width="53" 
height="39" --><MAP NAME="FrontPageMap1"><AREA SHAPE="RECT" COORDS="1, 5, 52, 
38" HREF="http://spitfire.avsafety nps.navy.mil/Help/Help.html" | 
TARGET="_blank"></MAP><img src="images/help.gif” border="0" width="53" height="39" 
usemap="#FrontPageMap1"><!--webbot bot="ImageMap" 
i-checksum="53524" endspan --></p> 
</td> 
</tr> 
</table> 
</center></div> 
</form> 
<script language="javascript” src="javascript/clearsurvey.js"> 
</script> | 
</body> 
</htm|> 
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APPENDIX E. JAVASCRIPT ERROR CHECKING CODE 


A. WHY USE JAVASCRIPT? 


The HTML form, as presented in Appendix E, is one means by which the 
client can fill out and submit his survey to the Spitfire server for processing. 
Error checking could be performed once the server receives the information, 
however, doing so uses invaluable server resources. A heavy load of simultaneous 
client requests would delay the submission process, and clients would see 
considerable delay as to whether their input was successfully accepted or not. 
To avoid this, error checking is done on the client's machine through the use of 
_Javascript. | 7 

The HTML form includes a Javascript file - checksurvey.js- which performs 
the necessary checks. When the client clicks the "Submit" button, the Javascript 
function check_formis executed. This method returns a boolean; if true, the form 


is sent on to the action URL 


http: //spitfire.avsafety.nps.navy.mil:8080/servlet/SurveyServlet, . 


otherwise a dialog box appears and informs the client of problems with the 


submission: 





Figure E.1. An Alert Dialog Box - the client is notified of submission errors. 


Once the client clicks the "OK" button, he will have the opportunity to 
correct the survey and submit it again. If there are no problems with the 
information entered, the client is immediately prompted by two dialog boxes 


which request the client's squadron and survey numbers. As in the Java™ Survey 
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applet, this information is used to authenticate the client submitting the form. 
SurveyServiet takes this information, checks the information by performing 
database queries, and either continues with processing the input or redirects 
the client to a different page based on the type of error that occurred. 

The Javascript code that performs the error checking is included in this 


Appendix for the reader's reference: 


B. JAVASCRIPT SOURCE CODE 


// constants used by checksurvey script 
var MAX_QUESTIONS = 61; 
var FIRST_QUESTION_ELEMENT = 11; 


//global boolean 
var form_errors = false; 


//global count of errors 
var error_count = 0; 


/finitially no errors 
var error_messages = new Array(); 


//Function: check_bio_information() 

/fParameters: None 

/fReturn Value: None 

/fPurpose: Checks all of the biographical information the client entered to 


If ensure that values are entered. Error results are concatenated 
HI together to form one error message that is entered into a global array 
// variable for later use. 


| een aera 


function check_bio_information({ 
var message = "Please check the following biographical information:\n"; 


var count = 0; 


//ooolean indicating whether there is a problem with the biographical information 
var problem, validHour1, validHour2; 


//if a problem exists with form data, then it was from a previous check, and we need to 
//reset it before checking again 
if (form_errors) 

form_errors = false; 


//check each of the biographical entries for errors 
if (document.survey.rank.selectedIndex == 0){ 
problem = true; 
message += "\t" + eval(++count) + ". No rank indicated. \n"; 


if (document.survey.designation.selectedIndex == 0){ 
problem = true; 
message += "\t" + eval(++count) + ". Designation missing.\n"; 


if (document.survey.community.selectedIndex == 0){ 
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problem = true; 
message += "\t" + eval(++count) + ". You must select a community.\n"; 


} 


validHour1 = check_string(new String(document.survey.flight_hours.value)); 


if (!validHour1){ 
problem = true; 
message += "\t + eval(++count) + ". Flight hours was not entered or is not a number! \n"; 


} 


validHour2 = check string(new String(document.survey.type_hours.value)); 


if (!validHour2){ 
problem = true; 
message += "\t" + eval(++count) + " ". Type hours was not entered or is not a number!\n"; 


} 


if (validHourl && validHour2){ 
var vall = parseInt(document.survey. flight hours. value); 
var val2 = parseInt(document.survey.type_hours. value); 
if (vall > 25000){ . 
problem = true; 
message += "\t" + eval(++count) + ". Flight hours must be less than 25000.\n"; 


} 
if (val2 > 25000){ 
problem = true; 
message += "\t" + eval(++count) + ". Type hours must be less than 25000.\n"; 


} 
if (val2 > vall){ 
problem = true; 
message += "\t" + svaiceecount) +". Number of type hours cannot be greater than flight hours.\n"; 
5 
} 


if (document.survey.department_head.selectedIndex = 0){ 
problem = true; 
message += "\t" + eval(++count) + ". You did not indicate whether you are a department head or not.\n"; 


if (document.survey.status.selectedIndex == 0){ 
problem = true; 
message += "\t" + eval(++count) + ". Missing duty status information.\n"; 


if (document.survey.service.selectedIndex == 0)§ 
problem = true; 
message += "\t" + eval(++count) + ". No branch of service indicated.\n"; 


if (document.survey.location.selectedIndex == 0){ 
problem = true; 
message += "\t" + eval(++count) + ". No squadron location chosen."; 


3 
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//if there was a problem, enter the message into the error_messages array and set form_errors to true 
if (problem) { 

error_messages[error_count++] = message; 

form_errors = true; 


}//end check_bio_informationQ) 


cio arc a a pi lace eh ee 
//Function: check_string() 

//Parameters: None 

//Return Value: boolean, indicating whether text entries are valid numbers or not. 

//Purpose: | Checks the number of flight and type hours to determine if valid 


/ they are valid numbers or not. This is a utility function called by 
H the method check_bio_information(). 


ae aa Nasr da aoe nas age een ase ee Le 
function check_string(value){ | 


if (value.length == 0) 
return false; 


var goodChars = new String("0123456789"); 
var validChar = true; 
var validEntry = true; 


for (var jx=0; jx<value.length; jx++){ 
for (var kx=0; kx<goodChars. length; kx++){ 
if (value.charAt(jx) == goodChars.charAt(kx)) 
validEntry = validChar = true; 


} 
if (!validChar)- 
return false; 
validChar = false; 


} 


return validEntry; 
}//end check_string() 


|] owwnvnnnen neve nnn nnn nanan nnnnn annem anna nnn n nnn nena nnn n anne en nennenennnnnnnn cen ewenenencnmnnnnnnnannnnnnannn 
//Function: check_survey_questions() | 
//Parameters: None 

//Return Value: None 

/fPurpose: Checks all of the survey questions to make sure they are answered. If 


// a question remains unanswered, the user will be notified when they try 
// to submit the form. 
|| ROA aE EN Se RE Te POE Ee ie AONE ke EEA See eae E eee EAE SMES TEN ET ENA aE 


function check_survey_questions() { 


var problem = false; 
var errors = new Array(); 
var question_numbers; 
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var count = 0; 
var message; 


for (var ix=FIRST_QUESTION_ELEMENT; ix <= FIRST_QUESTION_ELEMENT+MAX_QUESTIONS-1;ix++){ 
if (document.survey.elements[ix].selectedIndex == 0){ 
errors[count++] = (ix - (FIRST_QUESTION_ELEMENT - 1)); 
problem = true; | 
} 
j 


if (problem) { 
question_numbers = errors.join(", "); 
message = "The following question(s) was/were not answered: "; 
message += question_numbers; 
error_messages[error_count++] = message; 
form_errors = true; 7 


//end check_survey_questions() 


| |omennnnnnnnnnnn-anwnn anew nnnnn enna nn enn nn ennnnnnnn nen nnn nena nanan ewww eneennannnesennwennannnnmennmmmmnn nn 
//Function: — reset() 

//Parameters: None 

//Return Value: None 

/fPurpose: _ Resets the global variable values for form_errors and error_count. 


| Annan ie ee mncnma ences aannene ae eee eee 


- function reset(){ 


form_errors = false; 

error_count = 0; 

error_messages = new Array(Q); 
}//end reset() : 


[fonanenrennnnenneennn anne nnn ennnnnnenennenennemnnensaenenensnnnnsanenteeaeennananantantaent 


//Function: check_form() 

//Parameters: None 

//Return Value: None 

//Purpose: _ Calls utility functions to aid in the checking of form data. Ifa problem 


// is found, the user is notified, and the form is not submitted until the 
Hf problem is corrected. 
| |ewwewnnnnnnnnnnnnw nena ann nen eee nn nnn nnn n ween n nn nnn nnn mene ne eennennnnnenannnenenewnnnnnnnnnewennsewnnwnnnnnne 


function check_form(){ 


var msg; 
check_bio_informationQ); 
check_survey_questions(); 
if (form_errors){ 
if (error_messages.length > 1) 
alert(error_ messages[0] + "\n\n" + error_messages[1]); 


else alert(error_messages[0]); 


reset(); 
return false; 
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//get the user's survey_id and squadron_number if there are no problems 
get_squadron_number(); 
get_survey_id(); 
reset(); 
return true; 
}//end check_formQ 


| ae OR eet Cee EE ESL ae ee ee eC eT ee 


//Function: get_survey_idQ 

//Parameters: None 

//Return Value: None 

//Purpose: Queries the client for his/her survey_id number. 


|| Ee OTR te eee ena Nene AL TN Pe eee eo eR ene ena nee ee eae 


function get_survey_id(){ 


var survey_id; 
do { 
survey_id = new String(prompt("Please enter the survey id you were assigned (Valid characters 0-9 only):", "")); 
} while (!(check_string(survey_id))); a | 
document.survey.survey_number.value = survey_id; 
}//end get_survey_id(Q) 


Gh Sea Tk 


/fFunction: get _squadron_number() 

//Parameters: None 

/fReturn Value: None 

//Purpose: Queries the client for his/her squadron number. 


| neue endear eke EL enon eran nn eam Denese nner Pee rese 


function get_squadron_number(){ 


var squadron_num; 
do { 
squadron_num = new String(prompt("Please enter your squadron number (Valid characters 0-9 only):", "")); 
} while (!(check_string(squadron_num))); | | 
document.survey.squadron_number.value = squadron_num; 
}//end get_squadron_number() 
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APPENDIX F. SERVLET SOURCE CODE 
A. SURVEYSERVLET. JAVA 


//packages we will use that need to be imported 
import java.io.*; 

import java.sql.*; 

import javax.servlet.*; 

import javax.servlet.http.*; 

import file_utilities.*; 


public class SurveyServlet extends HttpServlet 

{ 
final int NUM_DATA_ITEMS = 70; 
final int NUM_BIO_ QUESTIONS = 9; | 
final int NUM_ SURVEY QUESTIONS = 61; 


java.sql.Connection con1, con2; 

java.sql.Statement stmt]; 

java.sql.PreparedStatement stmt2; 

java.lang.String ipAddress, host, squadron_type, unit_number, survey_number; 


/{ODBC data source name is survey, which references the Survey.mdb file 
java.lang.String urll = "jdbc:ff-microsoft://spitfire.avsafety.nps.navy.mil:1433/Survey2_DB"; 
java.lang.String url2 = "jdbc:ff-microsoft://spitfire.avsafety.nps.navy.mil:1433/Num_List_DB"; 


java.lang.String[] clientdata = new java.lang.String]NUM_DATA_ITEMS]; 
boolean entryError = false, generalError = false; 


//worker thread to write the client's data to a backup file 
file_utilities.WriteToFile fileop; _ 


//Function: checkSurveyNumbersDatabase() 

//Parameters: None 

//Return type: boolean, indicating whether the survey number is good or not 
//Purpose: Determines if the survey number corresponds to a legitimate 

// entry for the given squadron. 

| [eenonnnwnennnnewewe nen nnnnnnneen nnn nnn nana conn anna nennnnnennenecemnennnnnnn 

private boolean checkSurveyNumbersDatabase(){ 


boolean valid = false; 
int count = 0, start = -1, end = -1; 


stmt2.setString(1, squadron_type+unit_number); 
java.sql.ResultSet rs = stmt2.executeQuery(); 


if (rs != null){ 
while (rs.next()) { 
rs.getString(1); 
start = rs.getInt(2); 
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end =rs.getInt(3); 
System.out.println("Start is "+ start + " End is " + end); 


} 


if ((Integer.parseInt(survey_number) >= start) && (Integer.parseInt(survey_number) <= end)){ 
System.out.println("We have a valid survey number!"); 


valid = true; 
else { : 
System.out.printIn¢"We have an invalid survey number!"); 
j 
else { 


System.out.printin("We have an invalid survey number!"); 
rs.close(); 


} 
catch (java.sql.SQLException e){ 
System.out.printin(e.toString()); 


return valid; 
+//end checkSurveyNumbersDatabase() 


|| --w---~ onan nnnn anna nena nnn neem nn ne nnn nnn nnn nnennnnnnnnnn nnn aemnnnnammn 

//Function: destroyQ) 

//Parameters: None 

//Return type: None 

/fPurpose: Frees any shared servlet resources 

[/ Called when the servletrunner program is terminated 

|] onwennnnnn naa nnnnn nnn nn nnnnnnn ene n nnn nanan nnn n enn nannnnnnnnnnaareneennane 

public void destroyQ) { 
//close the connection to the database - underlying code takes care of 
//actually releasing the connection 


stmtl.close(); 
stmt2.close(); 
con1.close(); 
con2.close(); 


} 
catch (java.sql.SQLException e){ 
System.out.println(e.toString()); 


j 
//end destroy() 
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Ife aa ka ee 


//Function: doPostQ) 
//Parameters: request - an HttpServletRequest object that allows us to 


HI grab the values the client sent the servlet 
HI response - an HttpServietResponse object that allows us to 
Hf return a response back to the client 


//Return type: None 
//Purpose: Makes several calls to utility functions that operate on the 


Hf client's input - the client is redirected to a different page 
Hf depending on the success or failure of the POST operation. 


public void doPost(HttpServletRequest request, HttpServletResponse response) 
throws ServletException, IOException { 


entryError = false; 
boolean goodID = false; 


if (!generalError) { 
parseFormData(request); 


goodID = checkSurveyNumbersDatabase(); 
if (goodID){ 
makeDatabaseEntry(response); 


if (!entryError){ 
fileop.startQ); 
fileop.write(clientdata, ipAddress, host); 
try { 
response.setContentType("text/htm!"); 
response.sendRedirect("http://spitfire.avsafety.nps.navy. mil/ThankYou. html"); 


catch (java.io. IOException e){ 
System.out.printin(e.toStringQ); 


} 


else { 
response.sendRedirect("http://spitfire.avsafety.nps.navy.mil/NumberError.htm!"); 


} 
} 


else 
response.sendRedirect("http://spitfire.avsafety .nps.navy.mil/GeneralError.htm!"); 


}//end doPost() 


239 





| ]-n-n--- 2a anna nn nnn nnn nn nn nn nnn ne nnn nnn nnn nen n nnn en annnnnnnenennnaenan ens 

//Function: handleSQLExceptionQ) 

//Parameters: response - an HttpServletResponse object that allows us to 

Hf return a response back to the client 

H ex - an SQLException 

//Return type: None 

//Purpose: Generates HTML code that indicates to the user what SQL Error 
Hf was generated. 


| [anan-n anna naan nnn nnn n nanan nnn nnn nnn nnn enn nnnnnnnnnannnnnaanmenenen 


private void handleSQLException(HttpServletResponse response, java.sql.SQLException ex){ 


java.lang.String errorMessage = new String(); 
while (ex != null){ 
errorMessage += ("<br>Message: " + ex.getMessage() + "<br>SQL State: " + ex.getSQLState() 
+ "<br>Error Code: " + ex.getErrorCode() + "<br>"); 
System.out.printIn("Error executing SQL statements. Transaction not entered.\n"); 
System.out.println("-----------------------------nnn nnn nn nnn nnn ne nnnnnnn"); 
ex = ex.getNextException(); 


} 


try { 
PrintWriter out; 


response.setContentT ype("text/htm|"); 


out = response.getWriter(); 
out. orintin("<html><head>-<title>Error!</title></head><body bgcolor=#000000 link=#00FFFF>" + 


"<p><font color=#FFFF00 size=4>A problem was encountered while " + 

"trying to process your input. Possible causes for this are listed" + _ 

"below. If you have additional questions as to why your input-was " + 

"not accepted, you may contact the webmaster at </font>" + 

"<big><a HREF=mailto:spitfire.avsafety.nps.navy. mil>A VSafetyCenter</a></big>" + 
"<font color=#FFFF00 size=4>, or you may complete the survey again " + 

"and try resubmitting it.</font></p><p><font color=#FF0000 size=4> "+ 
errorMessage + "</big></big></font></p></body></htmI>"); 


catch (java.io. IOException e){ 
System.out.println(e.toString()); 


} 
}//end handleSQLException() 


//Function: initQ 

//Parameters: config - a servlet configuration object; this object is not 

// manipulated in the code; rather, the superclass is called, 

// and the object is manipulated by that class | 
//Return type: None 

//Purpose: Initializes the servlet. Resource-intensive procedures, such as 


// making a database connection, as well as shared resources, such 
// as the WriteToFile object, which stores a backup of the survey 
// information, is done here. 
| ee a eA AEE RAED ERE ese eR DE eee ee Re eee 
public void init(ServletConfig config) throws ServletException { 

super. init(config); 


//shared resources of all servlets - a connection to the database, and 
//a thread that saves a backup of form data to a plaintext file in the 
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/Nogs directory 


Class.forName("connect.microsoft.MicrosoftDriver"); 

con] = DriverManager.getConnection(url1, "sa", ""); 

con2 = DriverManager.getConnection(url2, "sa", ""); 

stmt] = con].createStatement(); 

stmt2 = con2.prepareStatement("SELECT * FROM Num_List WHERE Unit_ID = 2"); 
fileop = new file_utilities. WriteToFileQ); 


catch (java.lang.ClassNotFoundException e) { 
System.out.println(e.toString()); 
generalError = true; 


} 
catch (java.sql. SQLException e){ 
generalError = true; 


} 
}//end initQ) — 


|| ee ee RTE Re eS ne ncaa ae Rene SOE EE nN 
//Function: makeDatabaseEntry() | 
//Parameters: response - an HttpServletResponse object that is passed onto 
HW "the method handleSQLException, if an SQLException is 
// generated in the process of entering client information 
//Return type: None 

//Purpose: Enters the clients data into the database via JDBC calls. 

|| onen-nnnnnnnnnacnanncaenee nnn anannan nna nnennaa enna nnn ewan enone wanane snes 


private void makeDatabaseEntry(HttpServletResponse response) { 
try { 


java.lang.String operation = "INSERT INTO Biographical_Data VALUES("" + 
clientdata[0} +," + 
Integer.parseInt(unit number)+","+ ~ 
Integer.parseInt(survey_number) + ",” + 
clientdata{1]+",'" + 
clientdata[2] +," + 
Integer.parseInt(clientdata[3]) + "," + 
Integer.parseInt(clientdata[4]) + ",'" + 
clientdata[5] + '",'" + 
clientdata[6]j + ™,'" + 
clientdata[7} + ",'" + 
clientdata[$] + ™')"; 
System.out.printin("\nReceived client data. Parsing into database."); 
System.out.printin("Executing SQL statements:\n"); 
System.out.printIn(operation); 
stmtl.execute Update(operation); 


operation = "INSERT INTO Questions VALUES(" + 
clientdata[0] + '"," + 
Integer.parseInt(unit_number) + "," + 
Integer.parseInt(survey_number) + ","; 


for (int ix=NUM_BIO QUESTIONS; ix<xNUM_DATA_ITEMS-1; ix++) 
operation += (clientdata[ix] + ","); 

operation += clientdata[INUM_DATA_ITEMS-1] + ")"; 

System.out.println(operation); 
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stmtl.executeUpdate(operation); 
System.out.printin("SQL statements executed suiceesstully: i 


catch (java.sql.SQLException e){ 
entryError = true; 
handleSQLException(response, e); 


} 
}//end makeDatabaseEntry() 


|]-nnnennnnnnon nnn nwnnnnnnannnnanennwenenn enn nnnnnnnnn en anne nnnnnannnneennons 
//Function: parseFormData() 

//Parameters: request - an HttpServletRequest object that allows us to 

// grab the values the client sent the servlet - = 
//Return type: None 

//Purpose: Retrieves the form information that was sent to the servlet. 


|| Eee CIC rt Re eee EN OPE RD Rene EA Ce nee era Ee 


private void parseFormData(HttpServletRequest request) { 


ipAddress = request.getRemoteAddrQ); 
host = request.getRemoteHost(); 


//form parameters - form is made up of bio_data and questions 
squadron_type = new String(request.getParameter("Community")); 
unit_number = new String(request.getParameter("squadron_number")); 
survey_number = new String(request.getParameter("survey_number")); 


java.lang.String bio_data[] = {"community", "rank", "designation", "flight_hours”, "type_hours", 
"department_head", "status", "service", "location"}; 


java.lang.String questions{] = new StringINUM_SURVEY_QUESTIONS]; 


for (int ix=0; ix<NUM_SURVEY_QUESTIONS; ix++) 
questions[ix] = "question" + Integer.toString(ix+ 1); 


for (int jx=0; jx < clientdata.length; jx++){ 
if jx < NUM_BIO_ QUESTIONS) 
clientdata[jx] = request.getParameter(bio_data[jx]); 
else 
clientdata[jx] = request.getParameter(questions[jx-NUM_BIO _ QUESTIONS): 


} /fend parseFormData() 
}//end class SurveyServlet 
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B. WRITETOFILE . JAVA 
package file_utilities; 
import java.io.*; 


public class WriteToFile extends Thread { | 
static final java.lang.String resultsFile = "\\Inetpub\\wwwroot\\servlets\\survey.txt"; 
static final java.io.FileWriter fw; 
static final int DATA_ITEMS = 70; 


public WriteToFile() { 
_ Hopen a file to save survey results as a backup txt file 


fw = new FileWriter(resultsFile, true); 


catch (java.io. IOException ex){ 
System.out.printin("Please ensure the directory servlets exists!"); 
System.out.printIn("Otherwise, backup survey data will not be kept.”); 


} 


public void write(java.lang.String data[], java.lang.String ipAddress, 
java.lang.String host) throws IOException { 


java.io.PrintWriter toFile; 


synchronized (fw) { 
toFile = new PrintWriter(fw); 
java.util.Calendar ts = java.util.Calendar.getInstance(); 


System.out.printIn("Submission entered for:\n" + ipAddress + "/" + host +"\n"); 
System.out.println("---------------------------------------nnnnnn= ry: | 
toFile.printiIn("<FROM " + ipAddress + "/" + host + ">"); 
toFile.printiIn("<RECEIVED ON " + ts.getTime().toString() + ">"); 
toFile.printin("<BIO DATA>"); | 
for (int ix=0; ix<DATA_ITEMS; ix++){ 

if (ix == 10) 

toFile.printin("<SURVEY DATA>"); 


} 

if ((ix!=0) && (ix%9 = 0)) 
toFile.printIn(data[ix] + ""); 

else 

toFile.print(data[ix] +" "); 


} \ 
toFile.printin(""); 


Ge fle spain ee a 
fw.close(); 
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APPENDIX G. SURVEY APPLET SOURCE CODE 


A. SURVEY.JAVA SOURCE ‘CODE | 


import java.awt.*; 

import java.applet.*; 

import Questionnaire; 

public class Survey extends Applet 


boolean displayed = false; 


public void init() 

f | 
setLayout(null); 
setSize(650, 130); 
setBackground(new Color(0)); 
{1s} 

} 


public void paint(Graphics g){ 
g.setColor(Color.yellow); 
g.setFont(new Font("Serif”, Font.PLAIN, 30)); 
g.drawString("Please wait while the program loads...", 80,80); 


_ if (Idisplayed){ 
Questionnaire q = new Questionnaire(); 
q.show(this); | 
displayed = true; 
} 
} 
B. QUESTIONNATRE . JAVA SOURCE CODE 


import java.awt.*; 

import java.sql.*; 

import java.net.*; 

import symantec.itools.awt.TabPanel; 
import symantec. itools.awt.BorderPanel; 
import symantec.itools.multimedia.NervousText; 
import symantec.itools.awt. WrappingLabel; 
import symantec.itools.awt.ImagePanel; 
import symantec.itools.awt.TabPanel; 
import symantec.itools.awt.BorderPanel; 
import UserInput; 

import QuitDialog; 


public class Questionnaire extends Frame 
{ 
public Questionnaire() 


{ 
//{{INIT_ CONTROLS 
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setLayout(null); 

setVisible(false); 

setSize(insets().left + insets(). rieht + 910,insets().top + insets().bottom + 579); 
setResizable(false); 

setBackground(new Color(128,128,128)); 


tabPanell = new symantec.itools.awt.TabPanel(); 


try | 
java.lang.String[] tempString = {"Bio", "Questions 1-9", "Questions 10-18", 
"Questions 19-28", "Questions 29-40", "Questions 41-52", 
"Questions 53-61", "Submit Survey!"}; 
tabPanel 1 .setPanelLabels(tempString); 
tabPanel1.setCurrentPaneINdx(0); 


} 
catch(java.beans.PropertyVetoException e) { }_ 


for (int ix=0; ix<NUM_QUESTIONS; ix++){ 
choices[ix] = new java.awt.Choice(); 

choices[ix].addItem("Strongly Disagree"); 
choices[ix].addItem("Moderately Disagree"); 
choices[ix].addItem("Slightly Disagree"); 
choices[ix].addItem("NEUTRAL"); 
choices{ix].addItem("Slightly Agree"); 
choices[ix].addItem("Moderately Agree"); 
choices[ix].addItem("Strongly Agree"); 
choices/ix].addItem("NOT APPLICABLE"); 
choices[ix].setBackground(new Color(16777215)); 


try { 


choices[ix].select(-1); - 
} catch (IilegalArgumentException e) ‘ } 


wrappingLabels[ix] = new symantec.itools.awt.WrappingLabel(); 
wrappingLabels[ix].setFont(new Font("Dialog", Font.PLAIN, 14)); 
if (ix%2 != 0) 

wrappingLabels{ix].setForeground(new Color(16777215)); 
else wrappingLabels[ix].setForeground(new Color(0)); 


tabPanel1.setBounds(0,0,910,579); 

tabPanell .setBackground(new Color(12632256)); 
add(tabPanel1); 

borderPanell = new symantec.itools.awt.BorderPanelQ); 
borderPanel] .setLayout(null); | 

borderPanel 1 .setVisible(false); 

borderPanel1 .setBounds(12,33,888,520); 
borderPanel1.setBackground(new Color(-10707037)); 

tabPanel1 .add(borderPanel1); 

rankLabel = new java.awt.Label("Your rank:",Label.RIGHT); 
rankLabel.setBounds(158,63,180,26); 

rankLabel.setFont(new Font("Dialog", Font.PLAIN, 18)); 
rankLabel.setForeground(new Color(0)); 

borderPanel1 .add(rankLabel); 

designationLabel = new java.awt.Label("Your designation:" »Label. RIGHT); 
designationLabel.setBounds(158,99, 180,26); 
designationLabel.setFont(new Font("Dialog", Font.PLAIN, 18)); 
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designationLabel.setForeground(new Color(16777215)); 

borderPanel 1 .add(designationLabel); 

communityLabel = new java.awt.Label("Your community:",Label.RIGHT),; 
communityLabel.setBounds(158,135,180,26); 
communityLabel.setFont(new Font("Dialog", Font.PLAIN, 18)); 
communityLabel.setForeground(new Color(0)); 

borderPanel 1 .add(communityLabel); 

flightHoursLabel = new java.awt.Label("Total flight hours:",Label.RIGHT); 
flightHoursLabel.setBounds(158,171,180,26); 
flightHoursLabel.setFont(new Font("Dialog", Font.PLAIN, 18)); 
flightHoursLabel.setForeground(new Color(16777215)); 

borderPanel | .add(flightHoursLabel); 

typeHoursLabel = new java.awt.Label("Hours in type:",Label.RIGHT); 
typeHoursLabel.setBounds(158,207,180,26); 
typeHoursLabel.setFont(new Font("Dialog”, Font.PLAIN, 18)); 
typeHoursLabel.setForeground(new Color(0)); | 

borderPanel1. add(typeHoursLabel); 

DHLabel = new java.awt.Label("Are you a department head?",Label. RIGHT): 
DHLabel.setBounds(86,243,252,26); 

DHLabel.setFont(new Font("Dialog", Font. PLAIN, 18)); 
DHLabel.setForeground(new Color(16777215)); 
borderPanel1.add(DHLabel); 

statusLabel = new java.awt.Label("Your status:",Label.RIGHT); 
statusLabel.setBounds(110,279,228,26); 

statusLabel.setFont(new Font("Dialog", Font.PLAIN, 18)); 
statusLabel.setForeground(new Color(0)); 

borderPanell .add(statusLabel); 

" gerviceLabel = new java.awt.Label("Your service:",Label.RIGHT); 
serviceLabel.setBounds(1 10,3 15,228,26); 

serviceLabel.setFont(new Font("Dialog", Font.PLAIN, 18)); 
serviceLabel.setForeground(new Color(16777215)); 

borderPanel | .add(serviceLabel); 

locationLabel = new java.awt.Label("Your unit's location:",Label.RIGHT); 
locationLabel.setBounds(158,35 1, 180,26); 

locationLabel.setFont(new Font("Dialog", Font.PLAIN, 18)); 
locationLabel.setForeground(new Color(0)); 

borderPanel 1 .add(locationLabel); 

rankChoice = new java.awt.Choice(); 

rankChoice.addItem("O1-03"); 

rankChoice.addItem("O04-O5"); 

rankChoice.addItem("06-010"); 
rankChoice.addItem("CWO1-CW05"); 


try { 

rankChoice.select(-1); 
} catch (IllegalArgumentException e) { } 
borderPanel1 .add(rankChoice); 
rankChoice.setBounds(3 50,63, 158,27); 
rankChoice.setForeground(new Color(0)); 
rankChoice.setBackground(new Color(16777215)); 
designationChoice = new java.awt.Choice(); 
designationChoice.addItem("Pilot"); © 
designationChoice.additem("NFO"); 
designationChoice.additem("Other"); 
try { 

designationChoice.select(-1); 
} catch (IllegalArgumentException e) { } 
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borderPanel1.add(designationChoice); 
designationChoice.setBounds(350,99, 158,27); 
designationChoice.setForeground(new Color(0)); 
designationChoice.setBackground(new Color(16777215)); 
communityChoice = new java.awt.Choice(); 
communityChoice.addItem("HC"); 
communityChoice.addItem("HCS"); 
communityChoice.addItem("HM”"); 
communityChoice.addItem("HMH"); 
communityChoice.addltem("HMT"); 
communityChoice.addItem("HS"); 
communityChoice.addItem("HSC"); | 
communityChoice.additem("HSL"); 
communityChoice.addItem("VAQ"); 
communityChoice.addItem("VA W"); 
communityChoice.addItem("VF"); 
communityChoice.addItem("VFA"); 
communityChoice.addItem("VMAQ"); 
communityChoice.addItem("VMFA"); 
communityChoice.additem("VP"); 
communityChoice.additem("VQ"); 
communityChoice.addItem("VR"); 
communityChoice.addItem("VRC"); 
communityChoice.add]tem("VS"); 
communityChoice.addItem("VT"); 
communityChoice.addItem("VX"); 
communityChoice.addItem("Other"); 

try { : 

communityChoice.select(-1); 

} catch (IllegalArgumentException e) { } 
borderPanel1.add(communityChoice); 
communityChoice.setBounds(350, 135,158,27); 
communityChoice.setForeground(new Color(0)); 
communityChoice.setBackground(new Color(16777215)); 
flightHoursText = new java.awt.TextFieldQ; 
flightHoursText.setBounds(350, 171,156,23); 
flightHoursText.setFont(new Font("Dialog”, Font.PLAIN, 18)); 
flightHoursText.setBackground(new Color(16777215)); 
borderPanel 1 .add(flightHoursText); 

typeHoursText = new java.awt.TextField(); 
typeHoursText.setBounds(350,207, 156,23); 
typeHoursText.setFont(new Font("Dialog", Font.PLAIN, 18)); 
typeHoursText.setBackground(new Color(16777215)); 
borderPanel 1 .add(typeHoursText); 

DepartmentHead = new CheckboxGroup(); 

yesRadioButton = new java.awt.Checkbox("Yes", DepartmentHead, false); 
yesRadioButton.setBounds(362,243,72,24); 
yesRadioButton.setFont(new Font("Dialog", Font.PLAIN, 18)): 
yesRadioButton.setForeground(new Color(255)); 
yesRadioButton.setBackground(new Color(6070179)); 
borderPanel1.add(yesRadioButton); | 
noRadioButton = new java.awt.Checkbox("No", DepartmentHead, false); 
noRadioButton.setBounds(494,243,48,24); 
noRadioButton.setFont(new Font("Dialog", Font.PLAIN, 18)); 
noRadioButton.setForeground(new Color(255)); 
noRadioButton.setBackground(new Color(6070179)); 
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borderPanel1.add(noRadioButton); 

status = new CheckboxGroup(); 

regularRadioButton = new java.awt.Checkbox("Regular”, status, false); 
regularRadioButton.setBounds(362,279,96,27); 
regularRadioButton.setFont(new Font("Dialog", Font.PLAIN, 18)); 
regularRadioButton.setForeground(new Color(255)); 
regularRadioButton.setBackground(new Color(-10707037)); 
borderPanell add(regularRadioButton); 

activeRadioButton = new java.awt.Checkbox("Active Reserve", status, false); 
activeRadioButton.setBounds(494,279, 144,27); 
activeRadioButton.setFont(new Font("Dialog", Font.PLAIN, 18)); 

’ activeRadioButton.setForeground(new Color(255)); 
activeRadioButton.setBackground(new Color(-10707037)); 
borderPanel1 -add(activeRadioButton); 

drillingRadioButton = new java.awt.Checkbox("Drilling Reserve", status, false); 
drillingRadioButton.setBounds(650,279, 156,27); 
drillingRadioButton.setFont(new Font("Dialog", Font.PLAIN, 18)); 
drillingRadioButton.setForeground(new Color(255)); 
drillingRadioButton.setBackground(new Color(-10707037)); 
borderPanel1! .add(drillingRadioButton); 

serviceChoice = new java.awt.ChoiceQ); 
serviceChoice.additem("USN"); 

serviceChoice.additem("USMC"); 

serviceChoice.addItem("Other"); 


serviceChoice.select(-1); 
-} catch (IllegalArgumentException e) { } 
borderPanell .add(serviceChoice); 
serviceChoice.setBounds(350,3 15,15 827); 
serviceChoice.setForeground(new Color(0)); 
serviceChoice.setBackground(new Color(16777215)); 
location = new CheckboxGroup(); 
eastButton = new java.awt.Checkbox("East Coast", location, false); 
eastButton.setBounds(362,351,120,27); 
eastButton.setFont(new Font("Dialog", Font.PLAIN, 18)); 
eastButton.setForeground(new Color(255)); 
eastButton.setBackground(new Color(-10707037)); 
borderPanel1 .add(eastButton); 
westButton = new java.awt.Checkbox("West Coast", location, false); 
westButton.setBounds(494,351,132,27); 
westButton.setFont(new Font("Dialog", Font.PLAIN, 18)); 
westButton.setForeground(new Color(255)); 
westButton.setBackground(new Color(-10707037)); 
borderPanel1.add(westButton); 
otherButton = new java.awt.Checkbox("Other”, location, false); 
otherButton.setBounds(650,351,78,27); 
otherButton.setFont(new Font("Dialog", Font.PLAIN, 18)); 
otherButton.setForeground(new Color(255)); 
otherButton.setBackground(new Color(-10707037)); 
borderPanel1.add(otherButton); 


//frame gif's 
imagePanell = new symantec.itools.awt.ImagePanel(); 


imagePanel2 = new symantec.itools.awt.ImagePanel(); 
imagePanel3 = new symantec.itools.awt.ImagePanel(Q); 
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try { 


imagePanel] .setImageURL(new java.net.-URL 

("http://spitfire.avsafety nps.navy.mil/Survey/images/Compass.gif")); 
imagePanel1.setStyle(symantec.itools.awt.ImagePanel IMAGE_CENTERED); 
imagePanel | .setBounds(62,39, 108,92); | 
borderPanel1.add(imagePanel!); 


imagePanel2.setImageURL(new java.net.URL 

("http://spitfire.avsafety nps.navy.mil/Survey/images/Radar.gif")); 
imagePanel2.setStyle(symantec.itools.awt.ImagePanel IMAGE CENTERED); 
imagePanel2.setBounds(62,351,108,92); 
borderPanel1.add(imagePanel2); 


imagePanel3.setImageURL(new Java.net.URL 

("http://spitfire.avsafety nps.navy.mil/Survey/images/fly.gif")); 
imagePanel3.setStyle(symantec.itools.awt.ImagePanel. IMAGE SCALED _TO_FIT); 
imagePanel3.setBounds(564,75,276, 192); ) 
borderPanel] .add(imagePanel3); 


catch (java.net.MalformedURLException error) { } 
catch(java.beans.PropertyVetoException e) { } 


//beginning of second border, panel, i.e. second tab 


borderPanel2 = new symantec.itools.awt.BorderPanelQ; 
borderPanel2.setLayout(null); 

’ borderPanel2.setVisible(false); 
borderPanel2.setBounds(12,33,888,520); 
borderPanel2.setBackground(new Color(-10707037)); 
tabPanel].add(borderPanel2); 


nervousText] = new symantec. itools.multimedia.NervousText(); 


try { 
nervous Text] setText("A. PROCESS"); 


} 

catch(java.beans.PropertyVetoException e) { } 
nervousText1.setBounds(2,3,216,48); 
nervousText1.setFont(new Font("Helvetica", Font. BOLD, 36)); 
nervousText! .setForeground(new Color(16776960)); 
borderPanel2.add(nervousText1); 


f | 
wrappingLabels[0].setText 
("1. My command conducts adequate reviews and updates of safety standards " + 
"and operating procedures."); 
wrappingLabels{0].setBounds(2,63,672,20); 
borderPanel2.add(wrappingLabels[0}); 


wrappingLabels[1].setText 
("2. My command uses an internal audit and hazard repomans system to catch " + 


"any problems that may lead to a mishap."); 
wrappingLabels[1].setBounds(2,111,672,48); 
borderPanel2.add(wrappingLabels[1 ]); 


wrappingLabels[2].setText 
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("3. My command has a defined process to set training goals and to review " + 
"performance."); 
wrappingLabels[2].setBounds(2,171,564,20); 
borderPanel2.add(wrappingLabels[2}); 


wrappingLabels[3].setText 
("4. My command closely monitors proficiency and currency standards to " + 
"ensure aircrew are qualified to fly."); 
wrappingLabels[3].setBounds(2,219,672,20); 
borderPanel2.add(wrappingLabels{3]); 


wrappingLabels[4].setText 
(3. Command leadership is actively involved in the safety program and "+ 
"management of safety matters."); 
wrappingLabels[4].setBounds(2,255,672,20); 
borderPanel2.add(wrappingLabels[4}]); 


wrappingLabels[5].setText 

("6. My command has a defined process to effectively manage the high-risk aviator."); 
wrappingLabels[5].setBounds(2,303,672,20); 
borderPanel2.add(wrappingLabels[5)]); 


wrappingLabels[6].setText : 
("7. Human Factors Councils have been successful in identifying aircrew " + 
"members who pose a risk to safety."); 
wrappingLabels[6].setBounds(2,35 1,672,20); 
borderPanel2.add(wrappingLabels[6]); 


wrappingLabels[7].setText 
("8. Human Factors Boards have been successful reducing chances of an " + 
"aircraft mishap due to the high-risk aviator."); 
wrappingLabels{7].setBounds(2,399,660,32); 
Baise hance een appears ty 


wrappingLabels[8]. setText 
("9. My command makes effective use of the flight surgeon to help idenitfy " + 
"and manage high-risk personnel."); 
wrappingLabels[8].setBounds(2,447,672,20); 
borderPanel2.add(wrappingLabels[8}); 
} catch(java.beans.PropertyVetoException e) { } 


//add choice boxes to borderpanel2 


borderPanel2.add(choices[0}); 
choices[0].setBounds(686,63,172,21); 
borderPanel2.add(choices[1]); 
choices{1].setBounds(686,111,172,21); 
borderPanel2.add(choices[2]); 
choices[2].setBounds(686, 171,172,21); 
borderPanel2.add(choices[3]); 
choices[3 }.setBounds(686,219,172,21); 
borderPanel2.add(choices[4]); 
choices[4].setBounds(686,255,172,21); 
borderPanel2.add(choices[5}); 
choices[5].setBounds(686,303, 172,21); 
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borderPanel2.add(choices[6]); 
choices[6].setBounds(686,351,172,21); 
borderPanel2.add(choices[7]); 
choices[7].setBounds(686,399, 172,21); 
borderPanel2.add(choices[8}); 
choices[8].setBounds(686,447, 172 21); 


//beginning of borderpanel3, i.e. third tab 


borderPanel3 = new symantec.itools.awt.BorderPanelQ); 
borderPanel3.setLayout(null); 

~ borderPanel3.setVisible(false); 
borderPanel3 .setBounds(12,33,888,520); 
borderPanel3.setBackground(new Color(-10707037)); | 
tabPanel] .add(borderPanel3); 
nervousText2 = new symantec. ‘oli sailtdivedia NewousTSa0: 


try { 
 nervousText2.setText("B. REWARD SYSTEM AND SAFETY CULTURE"); 


\ | 
catch(java.beans.Property VetoException e) { } 
nervousText2.setBounds(2,3,744,48); 
nervousText2.setFont(new Font("Helvetica", Font.BOLD, 36)); 
nervousText2.setForeground(new Color(16776960)); 
borderPanel3 .add(nervousText2); 


{ 
wrappingLabels[9].setText | : 
("10. Command leadership encourages reporting safety discrepancies without ae 
"the fear of negative repercussions."); 
wrappingLabels[9].setBounds(2,63,636,43); 
borderPanel3.add(wrappingLabels[9]); 


wrappingLabels[10].setText 
("11. Individuals in my command are willing to report safety violations, as 
"unsafe behaviors or hazardous conditions."); 
wrappingLabels[10].setBounds(2,111,672,48); 
borderPanel3.add(wrappingLabels[10]); 


wrappingLabels[11].setText 
("12. In my command, peer influence is effective at discouraging violations " + 
_ “of standard operating procedures, or safety rules."); 
wrappingLabels 1 1].setBounds(2,171,664,36); 
borderPanel3.add(wrappingLabels[11]); 


wrappingLabels[12].setText 

("13. In my command, we believe safety is an integral part of all flight vee 

"operations."); 
wrappingLabels[12].setBounds(2,219,672,20); 
borderPanel3.add(wrappingLabels[12)); | 


wrappingLabels[13].setText 
("14. In my command, anyone who intentionally violates standard procedures, " + 
"or safety rules, is swiftly corrected.”); 

wrappingLabels| 13].setBounds(2,255,675,36); 

borderPanel3.add(wrappingLabels[13]); 


228 








wrappingLabels[14].setText 
("15. In my command, violations of operating procedures, flying regulations, " + 
"or general flight discipline are rare."); 
wrappingLabels[14].setBounds(2,303,675,36); 
borderPanel3.add(wrappingLabels[14]); 


wrappingLabels| 15].setText 
("16. Leaders in my command encourage everyone to be safety conscious and to " + 
"follow the rules."); 

wrappingLabels[ 15].setBounds(2,351,672,20); 

borderPanel3 .add(wrappingLabels[15]); 


wrappingLabels[16].setText 
("17. In this command, an aviator who persistently violates flight standards " + 
"and rules will seriously jeopardize his/her career."); 
wrappingLabels[16].setBounds(2,399,660,32); 
borderPanel3.add(wrappingLabels[16]); 
wrappingLabels[17].setText 
("18. I am not comfortable reporting a safety violation, because people in " + 
"my command would react negatively toward me."); 
wrappingLabels|[ 17].setBounds(2,447,665,36); 
‘ borderPanel3.add(wrappingLabels[17]); 
} catch(java.beans.PropertyVetoException e) { } 


//add choice boxes to borderpanel3 - 


borderPanel3 .add(choices[9]); 
choices[9].setBounds(686,63, 172,21); 
borderPanel3.add(choices[10]); 
choices[10].setBounds(686, 1 11,172,21); 
borderPanel3.add(choices[11]); 
choices[1 1].setBounds(686, 171,172,21); 
borderPanel3 .add(choices[ 12]); 
choices[12].setBounds(686,2 19, 172,21); 
borderPanel3 .add(choices[ 13); 
choices[13].setBounds(686,255, 172,21); 
borderPanel3.add(choices[14]); 
choices[14].setBounds(686,303, 172,21); 
borderPanel3.add(choices[15]); 

choices[ 15].setBounds(686,351,172,21); 
borderPanel3.add(choices[16]); 
choices[16].setBounds(686,399, 172,21); 
borderPanel3 .add(choices[ 17]); 

choices[ 17].setBounds(686,447, 172 21); 


//beginning of borderpanel4, i.e. fourth tab 


borderPanel4 = new symantec. itools.awt.BorderPanel(); 
borderPanel4.setLayout(null); 

borderPanel4.setVisible(false); 
borderPanel4.setBounds(12,33,888,520); 
borderPanel4.setBackground(new Color(-10707037)); 

tabPanel1 .add(borderPanel4); 

nervousText3 = new symantec. itools.multimedia.NervousText(); 


try { 
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nervousText3.setText("C. QUALITY"); 


} 

catch(java.beans.Property VetoException e) { } 
nervousText3.setBounds(2,3,228,48); 
nervousText3.setFont(new Font("Helvetica", Font. BOLD, 36)); 
nervousText3.setForeground(new Color(1677 6960)); 
borderPanel4.add(nervousText3); 


try { 
wrappingLabels[ 18]. setText 
(19. My command has a reputation for high quality performance."); 
wrappingLabels[18].setBounds(2,63,408,24); 
borderPanel4.add(wrappingLabels[18]); 


wrappingLabels[19].setText 
("20. My command sets high quality standards and strives to maintain " + 
"quality control."); : 
wrappingLabels[19].setBounds(2,99,540,24); 
borderPanel4.add(wrappingLabels[19]); 


wrappingLabels[20].setText 
("21. My command closely monitors quality and corrects any deviations from " + 
"established quality standards."); 

wrappingLabels[20].setBounds(2, 135,664,36); 

borderPaneld add(wrappingLabels[20}); 


wrappingLabels[21].setText 
("22. Quality standards in my command are clearly stated in formal " + 
"publications and procedural guides."); | 
wrappingLabels[2 1].setBounds(2,171,672,20); 
borderPanel4.add(wrappingLabels[21]); 


nervousText4 = new symantec.itools.multimedia.NervousText(); 
nervousText4.setText("D. RISK MANAGEMENT"); 
nervousText4.setBounds(2, 195,396,48); 
nervousText4.setFont(new Font("Helvetica", Font. BOLD, 36)); 
nervous Text4.setForeground(new Color(16776960)); 
borderPanel4.add(nervousText4); 


wrappingLabels[22].setText("23. Command leaders permit cutting corners to get a job done."); 
wrappingLabels[22].setBounds(2,267,408,24); 
borderPanel4.add(wrappingLabels[22]); 


wrappingLabels[23]. setText 
("24. Lack of experienced personnel has adversely affected my command's " + 
"ability to operate safely."); 
-wrappingLabels[23].setBounds(2,303,648,24); 
borderPanel4.add(wrappingLabels[23]); 


wrappingLabels[24].setText 
("25. Safety decisions are made at the proper levels, by the most " + 
"qualified people in my command."); 
wrappingLabels[24].setBounds(2,339,664,36); 
borderPanel4.add(wrappingLabels[24]); 


wrappingLabels[25].setText 
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("26. Command leaders consider safety issues during the formation and "+ 

"execution of operational and training plans."); 
wrappingLabels[25].setBounds(2,375,648,36); 
borderPanel4.add(wrappingLabels[25]); 


wrappingLabels[26].setText 

| ("27. Command leadership has a clear picture of the risks associated " + 
"with its flight operations."); 

wrappingLabels[26].setBounds(2,423,612,24); 

borderPanel4.add(wrappingLabels[26]); 


wrappingLabels[27].setText | 
("28. My command takes the time to identify and assess risks associated " + 
"with its flight operations."); 
wrappingLabels[27].setBounds(2,459,612,24); 
~ borderPanel4.add(wrappingLabels[27]); 
} catch(java.beans.PropertyVetoException e) { } 


/ladd choice boxes to borderpanel4 


borderPanel4.add(choices[18]); 
choices[18].setBounds(686,63, 172,21); 
borderPanel4.add(choices[19]); 
choices[19].setBounds(686,99, 172,21); 
borderPanel4.add(choices[20]); 
choices[20].setBounds(686, 135, 172,21); 
borderPanel4.add(choices[2 1); 
choices[21].setBounds(686, 171,172,21); 
borderPanel4.add(choices[22]); 
choices[22}.setBounds(686,267, 172,21); 
borderPanel4.add(choices[23]); 
choices[23].setBounds(686,303, 172,21); 
borderPanel4.add(choices[24]); 
choices[24].setBounds(686,339, 172,21); 
borderPanel4.add(choices[25}); 
choices[25].setBounds(686,375, 172,21); 
borderPanel4.add(choices[26]); 
choices[26].setBounds(686,423, 172,21); 
borderPanel4.add(choices[27}); 
choices[27].setBounds(686,459, 172,21); 


//beginning of borderpanels, i.e. fifth tab 


borderPanel5 = new symantec.itools.awt.BorderPanel(); 
borderPanel5.setLayout(null); 
borderPanel5.setVisible(false); 
borderPanel5.setBounds(12,33,888,520); 
borderPanelS.setBackground(new Color(-10707037)); 
tabPanel1.add(borderPanel5); 


{ 
wrappingLabels[28].setText 
("29. My command does a good job managing risks associated with its " + 
"flight operations."); | 
wrappingLabels[28].setBounds(2,27,552,24); 
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borderPanel5S.add(wrappingLabels[28]); 


wrappingLabels[29].setText | 
("30. My command has increased the chances of a mishap due to inadequate " + 
"or incorrect risk assessment."); 

wrappingLabels[29].setBounds(2,63,648,36); 

borderPanel5.add(wrappingLabels[29}); 


wrappingLabels[30].setText 
("31. lam provided adequate resources (time, staffing, budget, and equipment) ” + 
"to accomplish my job."); 

wrappingLabels[30].setBounds(2, 111,664,36); 

borderPanel5.add(wrappingLabels[30)); 


wrappingLabels[3 1].setText 
("32. My command provides the right number of flight hours per month for " + 
"me to fly safely."); 
wrappingLabels[3 1].setBounds(2, 147, 648 ,36); 
borderPanel5.add(wrappingLabels[31]); 


wrappingLabels[32].setText 
) ("33. [have adequate time to prepare for and brief my flights."); 
wrappingLabels[32].setBounds(2,195,612,24); 
borderPanelS.add(wrappingLabels[32)]); 


wrappingLabels[33].setText 
("34. Based upon my command's personnel and other assets, the command " + 
"Is over-committed."); 
wrappingLabels[33].setBounds(2,231,612,24); 
borderPanel5.add(wrappingLabels[33 )); 


wrappingLabels[34].setText 
(35. My command has incorporated Operational Risk Manaecment processes " + 
"in decision-making at all levels."); 

wrappingLabels[34].setBounds(2,267,660,36); 

borderPanel5.add(wrappingLabels[34]); 


wrappingLabels[35].setText("36. My supervisor can be relied on to keep his/her word."); 
wrappingLabels[35].setBounds(2,3 15,648,24); | 
borderPanel5.add(wrappingLabels[35}); 


wrappingLabels[36].setText("37. Our command leaders and supervisors can be trusted."); 
wrappingLabels[36].setBounds(2,351,664,24); 
borderPanel5. ad wreppmelavels|20)); 


wrappingLabels[37].setText("38.My command's sad Officer is highly regarded."); 
wrappingLabels[37].setBounds(2,387,648,24); 
borderPanelS.add(wrappingLabels[37]); 


wrappingLabels[38].setText("39. Our Safety Officer is influential in promoting eet: "); 
wrappingLabels[38].setBounds(2,423,612,24); 
borderPanel5.add(wrappingLabels[38]); 


wrappingLabels[39].setText("40. My command is genuinely concerned about safety."); 
wrappingLabels[39].setBounds(2,459,612,24); 
borderPanel5.add(wrappingLabels[39]); 
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} catchGjava.beans.PropertyVetoException e) { } 


//add choice boxes to borderpanel5 


borderPanel5.add(choices[28}]); 
choices[28].setBounds(686,27, 172,21); 
borderPanel5.add(choices[29]); 
choices[29].setBounds(686,63, 172,21); 
borderPanelS.add(choices[30]); 
choices{30}.setBounds(686, 111,172,21); 
borderPanel5.add(choices[3 1 ]); 
choices[3 1].setBounds(686, 147,172,21); 
borderPanel5.add(choices[32]); 
choices[32].setBounds(686, 195,172,21); 
- borderPanel5 .add(choices[33]); 
choices[33].setBounds(686,23 1,172.21); 
borderPanel5.add(choices({34}]); 
choices[34].setBounds(686,267,172,21); 
borderPanel5.add(choices[35]); 
choices[35].setBounds(686,3 15,172,21); 
borderPanel5 .add(choices[36]); 
choices[36].setBounds(686,351, 172,21); 
borderPanel5.add(choices[37]); 
choices[37].setBounds(686,387, 172,21); 
borderPanel5.add(choices[38}); 
choices[38].setBounds(686,423, 172,21); 
borderPanel5.add(choices[39}); 
choices[39].setBounds(686,459, 172,21); 


//beginning of borderpanel6, i.e. sixth tab 


borderPanel6 = new symantec.itools.awt.BorderPanel(); | : 
borderPanel6.setLayout(null); 

borderPanel6.setVisible(false); 

borderPanel6.setBounds(12,33,888,520); 

borderPanel6.setBackground(new Color(-10707037)); 

tabPanel] .add(borderPanel6); 


{ 
wrappingLabels[40].setText 
("41. Command leadership is successful in communicating its safety goals "+ 
"to unit personnel."); 
wrappingLabels[40].setBounds(2,27,588,24); 
borderPanel6.add(wrappingLabels[40]); 


wrappingLabels[4 1 ].setText 
("42. My:command provides a positive command climate that promotes safe " + 
"flight operations."); : 

wrappingLabels[4 1 ].setBounds(2,63,648,36); 

borderPanel6.add(wrappingLabels[4 1 ]); 


wrappingLabels[42].setText | 
("43. Command leadership is actively involved in the safety program and " + 
"management of safety matters."); 

wrappingLabels[42].setBounds(2, 1 11,664,36); 
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borderPanel6.add(wrappingLabels[42]); 


wrappingLabels[43].setText 

(44. Command leadership sets the example for compliance with flight standards."); 
wrappingLabels[43].setBounds(2, 147, 648 ,36); 
borderPanel6.add(wrappingLabels[43]); _ 


wrappingLabels[44].setText 
("45. My command ensures that all unit members are responsible and "+ 
"accountable for safe flight operations."); 
wrappingLabels[44].setBounds(2,195,684,24); 
borderPanel6.add(wrappingLabels[44]); 


wrappingLabels[45].setText } 
("46. Command leadership willingly assists in providing advice concerning " + 
"safety matters."); 
wrappingLabels[45].setBounds(2,231,612,24); 
borderPanel6.add(wrappingLabels[45]); 


wrappingLabels[46].setText 

("47. Command leadership reacts well to unexpected changes to its plans."); 
wrappingLabels[46].setBounds(2,267,660,36); 
borderPanel6.add(wrappingLabels[46]); 


wrappingLabels[47].setText 
("48. My command does not hesitate to temporarily restrict from flying as 
"individuals who are under high personal stress."); 
-wrappingLabels[47].setBounds(2,3 15,648,36); 
borderPanel6.add(wrappingLabels[47]); 


wrappingLabels[48].setText("49. I am adequately trained to safely conduct all of my flights."); | 
wrappingLabels[48].setBounds(2,35 1,664,24); 
borderPanel6.add(wrappingLabels[48}); 


wrappingLabels[49].setText("50. Morale and motivation in my command are high."); 
wrappingLabels[49].setBounds(2,387,648,24); 
borderPanel6.add(wrappingLabels[49]}); 


wrappingLabels[50].setText 
(51. My command ensures the uniform enforcement of all operating standards ge 
among unit members."); 
wrappingLabels[50].setBounds(2,423 660,24); 
borderPanel6.add(wrappingLabels[50]); 


wrappingLabels[51].setText("52. Crew rest standards are enforced in my command."); 
wrappingLabels[5 1].setBounds(2,459,612,24); 
borderPanel6.add(wrappingLabels[51]); 

} catch(java.beans.PropertyVetoException e) { } 


//add choice boxes to borderpanel6 


borderPanel6.add(choices[40}); 

_ choices[40].setBounds(686,27,172,21); 
borderPanel6.add(choices[4 1 ]); 
choices[4 1 }].setBounds(686,63,172,21); 
borderPanel6.add(choices[42]); 
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choices[42].setBounds(686, 111,172,21); 
borderPanel6.add(choices[43}); 
choices[43].setBounds(686, 147,172,21); 
borderPanel6.add(choices[44]); 
choices[44].setBounds(686, 195,172,21); 
borderPanel6.add(choices[45}); 
choices[45].setBounds(686,231,172,21); 
borderPanel6.add(choices[46)]); 
choices[46].setBounds(686,267, 172,21); 
borderPanel6.add(choices[47]); 
choices[47].setBounds(686,3 15,172,21); 
borderPanel6.add(choices[48]); 
choices[48].setBounds(686,351,172,21); 
borderPanel6.add(choices[49]); 
choices[49].setBounds(686,387, 172,21); 
borderPanel6.add(choices[50}); 
choices[50].setBounds(686,423, 172,21); 
borderPanel6.add(choices[51]); 
choices[51].setBounds(686,459, 172,21); 


//beginning of borderpanel7, i.e. seventh tab 


borderPanel7 = new symantec. itools.awt.BorderPanelQ; 
borderPanel7.setLayout(null); 

borderPanel7 .setBounds(12,33,888,520); 
borderPanel7.setBackground(new Color(-10707037)); 
tabPanel1.add(borderPanel7); 


try { 
wrappingLabels[52].setText 
("53. In my command, NATOPS tests and check rides are conducted as " + 
"intended, to candidly assess aircrew qualifications."); 
wrappingLabels[52].setBounds(2,27,588,36); 
borderPanel7.add(wrappingLabels[52]); 


wrappingLabels[53].setText 
(54. My command provides adequate safety backups to catch possible " + 
"human errors during high-risk missions."); 
wrappingLabels[53].setBounds(2,75,648,36); 
borderPanel7.add(wrappingLabels[53]); 


wrappingLabels[54].setText 
("55. Withim my command, good communications flow exists up and down " + 
"the chain of command."); 
wrappingLabels[54].setBounds(2, 123,664,36); 
borderPanel7.add(wrappingLabels[54]); 


wrappingLabels[55].setText 

("56. My command has good two-way communication with external commands."); 
wrappingLabels[55].setBounds(2, 159,648,36); 
borderPanel7.add(wrappingLabels[55]); 


wrappingLabels[56].setText 

("57. Safety education and training are adequate in my command."); 
wrappingLabels[56].setBounds(2,207,684,24); 
borderPanel7.add(wrappingLabels[56]); 
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wrappingLabels[57].setText 

("58. The Safety Department is a well-respected element bf my command."); 
wrappingLabels[57].setBounds(2,243,612,24); 
borderPanel7.add(wrappingLabels[57]); 


wrappingLabels[58].setText 
("59. The Aviation Safety Officer position is a sought-after billet in ' 
"my command."); 
wrappingLabels[58].setBounds(2,279,660,36); 
borderPanel7.add(wrappingLabels[58]); 


wrappingLabels[59].setText 
("60. My command's Safety Department keeps me well informed regarding " + 
"important safety information."); 
wrappingLabels[59].setBounds(2,327,648,36); 
borderPanel7.add(wrappingLabels[59]); 


wrappingLabels[60].setText 
("61. My command's Aircrew Coordination Training program is helping to" + 
"improve mission performance and safety."); 
wrappingLabels[60].setBounds(2,363,664,36); 
borderPanel7.add(wrappingLabels[60)}); 


} 
catch(java.beans.PropertyVetoException e) { } 


borderPanel7.add(choices[52]); 
choices[52].setBounds(686,27, 172,21); 
borderPanel7.add(choices[53 ]); 
choices[53].setBounds(686;75,172,21); 
borderPanel7.add(choices[54]); 
choices[54].setBounds(686, 123,172,21); 
borderPanel7.add(choices[55]); 
choices[55].setBounds(686, 159, 172,21); 
borderPanel7.add(choices[56]); 
choices[56].setBounds(686,207, 172,21); 
borderPanel7 .add(choices[57]); 
choices[57].setBounds(686,243, 172,21); 
borderPanel7.add(choices[58]); 
choices[58].setBounds(686,279, 172,21); 
borderPanel7.add(choices[59]); 
choices[59].setBounds(686,327, 172,21); 
borderPanel7.add(choices[60]); 
choices[60].setBounds(686,363, 172,21); 


/foeginning of borderpanel8 


borderPanel8 = new symantec.itools.awt.BorderPanelQ); 
borderPanel8.setLayout(null); 

borderPanel8.setVisible(false); 
borderPanel8.setBounds(12,33,888,520); 
borderPanel8.setBackground(new Color(-10707037)); 
tabPanell .add(borderPanel8); 

wrappingLabell = new symantec.itools.awt.WrappingLabel(); 


try { 
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wrappingLabel] .setText("When you are ready to submit your survey, press the submit” + 
“button. The textbox below will report any errors, and it will inform you when " + 

"a successful entry to the database has been made. After clicking the " + 

"submit button, you will be prompted for your squadron and survey number " + 

"so we can authenticate your response. Your answers remain confidential, " + 

"and no attempts will be made to identify individuals or organizations. " + 

"Thank you for your participation.”); 


} 

catch(java.beans.Property VetoException e) { } 
wrappingLabel1.setBounds(74,63,718,96); 
wrappingLabel1.setFont(new Font("Dialog”, Font.BOLD, 14)); 
' wrappingLabel1.setForeground(new Color(16762880)); 
borderPanel8.add(wrappingLabel1); 

submitButton = new java.awt.Button(Q); 
submitButton.setActionCommand("submit"); 
submitButton.setLabel("Submit!"); 
submitButton.setBounds(374, 183, 158,51); 
submitButton.setForeground(new Color(255)); 
submitButton.setBackground(new Color(12632256)); 
submitButton.setFont(new Font("Dialog", Font.PLAIN, 18)); 
borderPanel8.add(submitButton); 

responseText = new java.awt.TextArea("",0,0,TextArea. SCROLLBARS_ VERTICAL ONLY); 
responseText.setF oreground(new Color(16711680)); 
responseText.setBackground(new Color(16777215)); 
responseText.setFont(new Font("Dialog", Font. BOLD, 14); 
responseText.setEditable(false); 
‘responseText.setBounds(74,280,729,194); 
borderPanel8.add(responseText); 


setTitle("ACSA Survey"); 
/Tt} 


H{{INIT MENUS 

mainMenuBar = new java.awt.MenuBar(Q); 
menul = new java.awt.Menu("File"); 
miNew = new java.awt.Menultem("New"); 
menu] .add(miNew); 

menu] .addSeparatorQ); 

miExit = new java.awt.Menultem("Exit"); 
-menul.add(miExit); 
mainMenuBar.add(menul); 

menu2 = new java.awt.Menu("Help"); 
mainMenuBar.setHelpMenu(menu2); 
miAbout = new java.awt.Menultem("About.."); 
menu2.add(miA bout); 
mainMenuBar.add(menu2); 
setMenuBar(mainMenuBar); 

//$$ mainMenuBar. ne 277); 


Mt} 


H{{REGISTER_ LISTENERS 

Sym Window aSym Window = new SymWindow(); 
this.add WindowListener(aSym Window); 
SymAction ISymAction = new SymAction(); 
miAbout.addActionListener(ISymAction); 
miNew.addActionListener(ISymAction); 
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miExit.addActionListener(SymAction); 
SymMouse aSymMouse = new SymMouse(); 
submitButton.addMouseListener(aSymMouse); 


MS} 


public Questionnaire(java.lang.String title) 


{ 
this(); 
setTitle(title); 


public synchronized void show(java.applet.Applet FrameParent) 


{ 

move(50, 50); 
super.show(Q); 
parent = FrameParent; 


} 
static public void main(String args[]) 


(new Questionnaire()).showQ; 


public void addNotify() 
{ 


_ // Record the size of the window prior to calling parents addNotify. 
Dimension d = getSizeQ; 


super.addNotifyQ; 


if (f(ComponentsAdjusted) 
return; 


// Adjust components according to the insets 

setSize(insets().left + insets().right + d-width, insets().top + insets(). bottom + d. height); 
Component components[] = getComponents(); 

for (int i= 0; i < components.length; i++) 


{ 
Point p = components[i].getLocationQ; 
p.translate(insets().left, insets().top); 
components|i].setLocation(p); 
fComponentsAdjusted = true; 
} 


// Used for addNotify check. 
boolean fComponentsAdjusted = false; 


H{{DECLARE CONTROLS 

java.awt.FileDialog openFileDialog]; 

final int NUM_QUESTIONS = 61; 

symantec.itools.awt.TabPanel tabPanell; 

symantec. itools.awt.BorderPanel borderPanell, borderPanel2, borderPanel3, borderPanel4, 


borderPanel5, borderPanel6, borderPanel7, borderPanel8; 
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symantec.itools.awt.ImagePanel imagePanell, imagePanel2, imagePanel3; 
symantec.itools.multimedia. NervousText nervousTextl, nervousText2, nervousText3, 
nervous Text4; 


java.awt.Choice choices{] = new java.awt.Choice[NUM_QUESTIONS]; 
symantec.itools.awt.WrappingLabel wrappingLabels[] = new 

symantec.itools.awt. WrappingLabel[NUM_QUESTIONS]; 

symantec. itools.awt.WrappingLabel wrappingLabel1; 
java.awt.TextArea responseText; 
java.awt.Button submitButton; 

java.awt.Label rankLabel, designationLabel, communityLabel, flightHoursLabel, typeHoursLabel, 
DHLabel, statusLabel, serviceLabel, locationLabel; | 
java.awt.Choice rankChoice, designationChoice, communityChoice, serviceChoice; 

java. awt.TextField flightHoursText, typeHoursText; : 
java.awt.Checkbox yesRadioButton, noRadioButton, regularRadioButton, activeRadioButton, 
drillingRadioButton, eastButton, westButton, otherButton; 

CheckboxGroup DepartmentHead, status, location; 

boolean processing = false; 

java.applet.Applet parent; 

M}} 


/{{DECLARE MENUS 
java.awt.MenuBar mainMenuBar; 
java.awt.Menu menul; 
java.awt.Menultem miNew; 
java.awt.Menultem miExit; 
java.awt.Menu menu2; 
java.awt.Menultem miAbout; 


M3} 


|| EEE OR RE Ee TEI ee RPE nee Re Ree desueees 
//Class: . SymMouse 
/fPurpose: Inherits methods from the Java class MouseAdapter. This class is an event 


Hf listener which should be attached to GUI components that are part of the applet. 
// It overrides the method mouseClicked, checks for the source of the event, 

Hf and dispatches to an appropriate procedure based on the event's source. Listeners 
// should be registered at the time the component is put onto the applet, i.e. in the 

// applet initQ) method. 

/fExceptions: None 
||eorennnnnnnennnnnnnnnanenenen enn nnnnnwnnnnen een ennnn nnn ennnnnnnnnnncnneneennnmamennnnnnnn 


class SymMouse extends java.awt.event.MouseA dapter 
public void mouseClicked(java.awt.event.MouseEvent event) 


Object object = event.getSource(); 
if (object == submitButton) 
submitButton_MouseClick(event); 


} 


|] -------n nn nnn nn nnn nn enna nnn nnn enna nn nnn newer nnn een nn nnn anne nnnnn ene wennnnnensnneenereene 
//Function: submitButton_MouseClick() 

//Parameters: event - the MouseEvent that occurred 

/fReturn Type: None 

/fPurpose: Checks to see if the applet is processing information. If it is, no actions is 
[| taken. If not, then the client's data is checked. 
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//Exceptions: None 
[[n--n--wnnn nn nn nnn nnn nnn nn nnn nnn n nnn nnn nnn nn nner neem ncnnn nn annnnnenenenenennen= 
public void submitButton_MouseClickGjava.awt.event.MouseEvent event) 
{ 
if (!processing) { 
processing = true; 
responseText.appendText("Validating data...\n"); 
checkData(Q); 


} 


|]onn-nnnnan nnn nnnn nnn nn nnn nnn nano nnn nnn nnn nn nnn nnn ene eeennnnnennnnnennnnnnennnnn 
/fFunction: —checkData() 

//Parameters: None 

//Return Type: None 

//Purpose: Checks the client's data and alerts the client as to what errors were found. 
/YExceptions: None 


private void checkData() { 


java.lang.String flight_hrs = flightHoursText.getTextQ); 
java.lang.String type_hrs = typeHoursText.getText(); 
int error_count = 0; 

boolean any_ errors = false; 

boolean number _format_error = false; 


//clear the response box 
responseText.setText('""); 


//check bio page 
responseText.appendText("“CHECKING BIO:\n"); 


if (rankChoice.getSelectedIndexQ = -1){ 
responseText.appendText(Integer.toString(++error_count) + ". No rank selected.\n"); 
any_errors = true; | | 


} 


if (designationChoice.getSelectedIndex() == -1){ 
responseText.appendText(Integer.toString(++error_count) + ". Missing designator.\n"); 
any_errors = true; 


} 


if (communityChoice.getSelectedIndex() = -1){ 
responseText.appendText(Integer.toString(++error_count) +". No community selected.\n"); 
any_errors = true; 


} 


if (flight_hrs.compareTo("") == 0){ 
responseText.appendText(Integer.toString(++error_count) + ". Flight hours was not entered!\n"); 
any errors = true; 


j 


if (type_hrs.compareTo("") == 0) | | 
responseText.appendText(Integer.toString(++error_count) + ". Type hours was not entered!\n"); 
any_ errors = true; 


} 
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try { 
if ((flight_hrs.compareTo("") != 0) && 

((integer.parseInt(flight_hrs) <= 0) || (Integer.parseInt(flight_hrs) >= 10000))){ 
responseText.appendText(Integer.toString(++error_count) + ". Flight hours must be between 0 
and 10000!\n"); | 
any_errors = true; 


} catch (java.lang.NumberFormatException e){ 
responseText.appendText(Integer.toString(++error_count) + ". Flight hours is not a number! 
(Ensure you round to the nearest hour)\n"); 

number_format_error = any_errors = true; 


3 


try { 
if Gane! hrs.compareTo("") != 0) && 


((Integer.parseInt(type_hrs) <= 0) || (Integer.parseInt(type_hrs) >= 10000))){ 
responseText.appendText(Integer.toString(++error_count) + ". Type hours must be between 0 and 
10000!\n"); | 

any_errors = true; 


} catch (java.lang.NumberFormatException e){ 
responseText.appendText(Integer.toString(++error_count) + ". Type hours is not a number! 
(Ensure you round to the nearest hour)\n"); 

number _format_error = any_errors = true; 


} 


if ((!any_errors) && (!number_format_error)) { 
if (Integer.parseInt(flight_hrs) < Integer.parseInt(type_hrs)){ 
responseText.appendText(Integer.toString(++error_count) + 
". Flight hours must be greater than type hours!\n"); 
any_errors = true; 
} 
} 


if (DepartmentHead.getSelectedCheckbox() == null){ 
responseText.appendText(Integer.toString(++error_count) + 
"You did not indicate whether you are a department head or not.\n"); 
any_ errors = true; 


} 


if (status.getSelectedCheckbox() == null){ 
responseText.appendText(Integer.toString(++error_count) + ". Status not indicated.\n"); 
any errors = true; 


3 


if (serviceChoice.getSelectedIndexQ = -1){ 
responseText.appendText(Integer.toString(++error_count) + ". No service selected.\n"); 
any_errors = true; | 


3 


if (location.getSelectedCheckbox() = null){ 
responseText.appendText(Integer.toString(++error_count) + 
" You must indicate your unit's location.\n"); 
any errors = true; 


3 


24] 





if (!any_errors) 
responseText.appendText("Bio questions answered comely =); 


responseText.appendText("\nCHECKING QUESTIONS :\n"); 
boolean unanswered_questions = false; 


//check all questions 
for (int ix=0; ix <NUM_ QUESTIONS; ix++){ 
if (choices[ix].getSelectedIndex(Q) == -1) 
any_errors = unanswered_questions = true; 
} d 


if(unanswered_questions){ 
responseText.appendText 
("PLEASE ENTER ANSWERS FOR THE FOLLOWING QUESTIONS: "); 
for (int jx=0; jx <NUM_QUESTIONS; jx++){ 
if (choices[jx].getSelectedIndex(Q) == -1) 
responseText.appendText(Integer.toString(jx+1) +" "); 
, 


} 
else 
responseText.appendText("All questions answered.\n"); 


if (lany_errors){ 
UserInput ui = new UserInputt(this, true); 
ui.setVisible(true); 
java.lang.String squadNum = ui.squadronNumber.getText(); 
java.lang.String surveyNum = ui.surveyNumber.getTextQ); 
java.lang.String unit = new StringQ); 
responseText.appendText("No errors! Attempting to submit...”); 
boolean valid = checkSurveyNumber(unit, squadNum, surveyNum); 
if (valid) 

makeDatabaseEntry(squadNum, surveyNum); 
} 


processing = false; 
}//end check_Data(Q) 


|] na-nennnnnnnnnmnnnennnnnnn nnn nnnnnnnnne wenn nnnnnnnnenennnnnnnnenennnnnnnnnnmunmnnmnnamnnnn 


//Function: checkSurveyNumber() 

//Parameters: unit - the unit submitting the survey 

HM squad - the unit's squadron number 

I surv - the individual’s survey number 

//Return Type: boolean - true if the survey number is valid for the given unit and squadron, 
// false otherwise 

//Purpose: Confirms if the survey number is valid or not. If it is valid, then the 


// client can submit the survey, otherwise, the client is informed that the 
HI survey number is invalid. 
|| anna nnnnnnnennennannnnnnnnnnn anna nnnn nnn nnn n anna nnn nen nnnnnnnnnnnnnncnnaenmnnnn ann an mman 


private boolean checkSurveyNumber 
(java.lang.String unit, java.lang.String squad, java.lang.String surv){ 


java.lang.String communities[] = {"HC", "HCS", "HM", "HMH", "HMT", "HS", "HSC", "HSL", 
"VAQ", "VAW", "VF", "VFA", "VMAQ", "VMFA", 
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"VP", "VQ", "VR", "VRC", "VS", "VT", 
"VX", "Other"}; 


java.lang.String url = "jdbc:ff-microsoft://spitfire.avsafety nps.navy.mil:1433/Num_List_DB"; 
int start = -1, stop = -1; 


boolean valid = false; 


if (communityChoice.getSelectedIndex() != -1){ 
unit = new String(communities[communityChoice.getSelectedIndex()] + squad); 


Class.forName("connect.microsoft.MicrosoftDriver").newInstance(); 
java.sql.Connection con = DriverManager.getConnection(url, "sa", ""); 
java.sql.PreparedStatement stmt = con.prepareStatement 

_ ("SELECT * FROM Num_List WHERE Unit_ID = ?"); 
‘stmt.setStrmg(1, unit); | 
java.sql.ResultSet rs = stmt.executeQueryQ); 


if (rs !=null){ 
while (rs.next()){ 
rs.getString(1); 
start = rs.getInt(2); 
stop = rs.getInt(3); 
} 
: 3 


if ((Integer.parseInt(surv) >= start) && (Integer.parseInt(surv) <=stop)){ 
valid = true; 
responseText.appendText("Your survey number is valid... Please wait...\n"); 


} 
else responseText.appendText("You entered an INVALID number!!!\n"); 


stmt.closeQ); 
con.close(Q); 


catch (Exception e) { 
responseText.appendText(e. toString) + "\n"); 
} 
} 


return valid; 
}//end checkSurveyNumber() 


|| eR RL NCCT Ae ABORT RE Se OE SR EE Ree ee ee ee 


/fFunction: makeDatabaseEntry() 

//Parameters: squadN - the unit's squadron number 

/ surveyN - the unit's survey number 

//Return Type: None 

//Purpose: The client's data has already been checked, and the survey number has been 
been validated prior to this function being called. Once this procedure is 


i completed, the client's data has been inserted into the SQL 6.5 database. 
H Entries are made in both the biographical and questions table, and if either 
HI insertion operation fails, then the transaction is ss back (i.e. it is 

/ removed from the database). 
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| nnn-nnnnnnnnnnn nn enna nnnn nanan nn nen nnw nn nena nn enn nnn ennnanenennnmennaennnennanamanwnnnns 
‘ private void makeDatabaseEntry(java.lang.String squadN, java.lang.String surveyN){ 


java.lang.String url = "jdbc:ff-microsoft://spitfire.avsafety.nps.navy.mil:1433/Survey2_DB"; 


java. ne String designator[] = {"Pilot", "NFO", "Other"}; 

java. lang. String communities[] = {"HC", "HCS", "HM", "HMH", "WMT", "HS", "HSC", "HSL", 
"VAQ", "AW", "VF", "VFA", "VMAQ", "VMFA", : 
eV PE "VQ", "VR", "VRC", AVS", "VT"", 
"VX", "Other"}; 


java.lang.String service[] = {"USN", "USMC", "Other"}; 
java.lang.String DH, ST, LOC; 


/findependently determine which checkboxes are selected 

if (DepartmentHead.getSelectedCheckbox() == yesRadioButton) 
DH = new String("Yes"); 

else DH = new String("No"); 


if (status.getSelectedCheckbox() == regularRadioButton) 
ST = new String("Regular”); 

else if (status. getSelectedCheckbox() == activeRadioButton) 
ST = new String(""Active Reserve"); 

else ST = new String("Drilling Reserve"); 


if (location.getSelectedCheckbox() == eastButton) 
LOC = new String("East Coast"); 

else if (location.getSelectedCheckbox() == westButton) 
LOC = new String("West Coast"); 

else LOC = new String("Other”"); 


java.sql.Connection con = null; 


Class.forName("connect.microsoft.MicrosoftDriver").newInstance(); 
Driver driver2 = new connect.microsoft.MicrosoftDriver(); 

con = DriverManager.getConnection(url, "sa", ""); 
con.setAutoCommit(false); 

java.sql.Statement stmt] = con.createStatement(); 
java.sql.Statement stmt2 = con.createStatement(); 


stmt .executeUpdate("INSERT INTO Biographical_Data VALUES(" + 
communities[communityChoice.getSelectedIndex()] + "," + 
Integer.parseInt(squadN) + "," + 
Integer.parseInt(surveyN) +"," + 
rankChoice.getSelectedIndex(Q) + ",'" + 
designator[designationChoice.getSelectedIndex()] +," + 
Integer.parseInt(flightHoursText.getText()) +'"," + 
Integer.parseInt(typeHoursText. ectText()) + +" m4 
DH + tr a + | 
ST + a m a 
service[serviceChoice.getSelectedIndex()] i 
LOC + my"); : 


java.lang.String operation = "INSERT INTO Questions VALUES("" + 
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communities[communityChoice.getSelectedIndex()] + '"," + 
Integer.parseInt(squadN) + "," + 
Integer.parseInt(surveyN) +",”; 
for (int ix=0; ix<NUM_QUESTIONS-1; ix++) 
operation += (choices[ix].getSelectedIndex() + ","); 


operation += choices[NUM_QUESTIONS-1].getSelectedindex() + ")"; 


stmt2.execute Update(operation); 
con.commit(); | 
con.setAutoCommit(true); 
stmt] .closeQ); 
stmt2.close(); 
con.close(); 
responseText.appendText("Survey successfully submitted. Thank you for your input.\n"); 
this.hideQ); | 
parent.getA ppletContext().showDocument 
(new URL("http://spitfire.avsafety.nps.navy.mil/ThankY ou.htm1"), "_ self"); 


catch (Exception e){ 
responseText.appendText("Survey not submitted! Processing error encountered:\n"); 
responseText.appendText(e.toString() + "\n"); 


if (con != null) 
con.rollbackQ; 


} 
catch (SQLException ex){ 


responseText.appendText("Survey not submitted! Processing error encountered:\n"); 
responseText.appendText(ex.toStringQ) + "\n"); 


j 
} . 
}//erid makeDatabaseEntry() 


class Sym Window extends java.awt.event.WindowAdapter 
public void windowClosing(java.awt.event.WindowEvent event) 
Object object = event.getSource(); 
if (object == Questionnaire.this) 


Questionnaire_WindowClosing(event); 


} 
}//end class Sym Window 


void Questionnaire _WindowClosing(java.awt.event.WindowEvent event) 
f 
hideQ); // hide the Frame 
dispose(); // free the system resources 
System.exit(0); // close the application 
}//end Questionnaire_WindowClosing() 


class SymAction implements java.awt.event.ActionListener 


public void actionPerformed(java.awt.event.ActionEvent event) 
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Object object = event.getSource(); 
if (object == miAbout) 
miAbout_Action(event); 
else if (object == miExit) 
miExit_Action(event); 
else if (object == miNew) 
miNew_ActionPerformed(event); 


} 
//end class SymAction 


void miAbout_Action(java.awt.event.ActionEvent event) 


{ 
H{ {CONNECTION 
// Action from About Create and show as modal 
AboutDialog ad = new AboutDialog(this, true); 
ad.setVisible(true); 
IT¥} 
3//end miAbout_Action() 


void miExit_Action(java.awt.event.ActionEvent event) 


/1§ {CONNECTION 
// Action from Exit Create and show as modal 
(new QuitDialog(this, true)).setVisible(true); 
/}} 
}//end miExitActionQ 


void miNew_ActionPerformed(java.awt.event.ActionEvent event) 


{ 


rankChoice.select(-1); 
designationChoice.select(-1); 
communityChoice.select(-1); 
flightHoursText.setText("”); 
typeHoursText.setText(""); 
DepartmentHead.setCurrent(null); 
status.setCurrent(null); 
serviceChoice.select(-1); 
location.setCurrent(null); 
for (int ix=0; ix<NUM_QUESTIONS; ix++) 
choices[ix].select(-1); 


; 
catch (IllegalArgumentException e) { } 
}//end miNew_ActionPerformed() 


}//end class Questionnaire 


Cc. USERINPUT.JAVA SOURCE CODE 
import java.awt.*; 


public class UserInput extends Dialog 
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public UserInput(Frame parent, boolean modal) 
super(parent, modal); 


/! This code is automatically generated by Visual Cafe when you add 
// components to the visual environment. It instantiates and initializes 
// the components. To modify the code, only use code syntax that matches 
/{ what Visual Cafe can generate, or Visual Cafe may be unable to back 
// parse your Java file into its visual environment. 

H{ {INIT CONTROLS 

setLayout(null); 

setVisible(false); 

setSize(430,257); 

setResizable(false); 

setBackground(new Color(12632256)); 

labell = new java.awt.Label("Access Number:",Label.RIGHT); 
labell .setBounds(24,36, 168,54); 

labell.setFont(new Font("Dialog", Font.PLAIN, 18)); 

add(label1); 

label2 = new java.awt.Label("Survey Number:",Label.RIGHT); 
label2.setBounds(24,96, 168,54); : 

label2.setFont(new Font("Dialog”, Font.PLAIN, 18)); 

add(label2); 

squadronNumber = new java.awt.TextFieldQ); 
squadronNumber.setBounds(204,48, 186,36); 
squadronNumber.setFont(new Font("Dialog", Font.PLAIN, 22)); 
add(squadronNumber); | 

surveyNumber = new java.awt.TextFieldQ); 
surveyNumber.setBounds(204, 108, 186,36); 

surveyNumber.setF ont(new Font("Dialog”, Font.PLAIN, 22)); 
add(surveyNumber); 

OKButton = new java.awt.ButtonQ); 

OKButton.setLabel("OK"); 

OKButton.setBounds(180,168,97,48); 

OKButton.setFont(new Font("Dialog", Font.PLAIN, 22)); 
OKButton.setForeground(new Color(255)); 
OKButton.setBackground(new Color(12632256)); 

add(OK Button); 

setTitle("The following information is requested:"); 


IT} 


/{ {REGISTER_LISTENERS 
Sym Window aSym Window = new SymWindow(); 
this.addWindowListener(aSym Window); 
SymMouse aSymMouse = new SymMouse(); 
OKButton.addMouseListener(aSymMouse); 
HS} | | 

} 


public void addNotifyQ) 


// Record the size of the window prior to calling parents addNotify. 
Dimension d = getSize(Q); 


super.addNotifyQ; 
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if (f(ComponentsA djusted) 
retum; 


// Adjust components according to the insets 

setSize(insets().left + insets().right + d.width, insets().top + Se: bottom + d.height); 
Component components[] = getComponents(); 

for (int i = 0; i < components.length; i++) 


{ 
Point p = components{i].getLocationQ); 
p.translate(insets().left, insets().top); 
components[i].setLocation(p); 

3 


fComponentsA djusted = true; 
a 


// Used for addNotify check. 
boolean fComponentsAdjusted = false; 


public UserInput(Frame parent, String title, boolean modal) 


this(parent, modal); 
setTitle(title); 


{ts 
* Shows or hides the component depending on the boolean flag b. 
* @param b if true, show the component; otherwise, hide the component. 
* @see java.awt.Component#is Visible 


*) 
public void setVisible(boolean b) 
if(b) 
f | 
Rectangle bounds = getParent().getBounds(); 
- Rectangle abounds = getBounds(); 
setLocation(bounds.x + (bounds.width - abounds.width)/ 2, 
bounds.y + (bounds.height - abounds.height)/2); 
} 
super.setVisible(b); 
| 
/1{{DECLARE CONTROLS 
java.awt.Label label1; 
java.awt.Label label2; 


java.awt.TextField squadronNumber; 
java.awt.TextField surveyNumber; 
java.awt.Button OK Button; 


IT}} 


class Sym Window extends java.awt.event.WindowAdapter 


public void windowClosing(java.awt.event.WindowEvent event) 


{ 
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Object object = event.getSource(); 
if (object == UserInput.this) 
UserInput_WindowClosing(event); 


} 


void UserInput_WindowClosing(java.awt.event.WindowEvent event) 


//setVisible(false); 
} 


~ class SymMouse extends java.awt.event.MouseA dapter 
public void mouseClicked(java.awt.event.MouseEvent event) 


Object object = event.getSource(); 
if (object == OK Button) 
OKButton_MouseClicked(event); 


} 


void OKButton_MouseClicked(java.awt.event.MouseEvent event) throws 
java.lang.NumberFormatException | 


java.lang.String surveyN = surveyNumber.getTextQ); 
java.lang.String squadN = squadronNumber.getTextQ); 
try { | 
if ((surveyN.compareTo("") == 0) || (squadN.compareTo('") == 0) || 
- Unteger.parseInt(surveyN) < 0) || (integer.parseInt(squadN) < 0)){ 
- squadronNumber.requestFocus(); 
squadronNumber.setText(""); 
surveyNumber.setText(""); 


else disposeQ); 


catch (java.lang. NumberFormatException e){ 
squadronNumber.requestFocus(); 
squadronNumber.setText(""); 
surveyNumber.setText("""); 

} 

} 
JS 


D. ABOUTDIALOG.JAVA SOURCE CODE 
import java.awt.*; 


public class AboutDialog extends Dialog { 


public AboutDialog(Frame parent, boolean modal) 


{ 


super(parent, modal); 


// This code is automatically generated by Visual Cafe when you add 

// components to the visual environment. It instantiates and initializes 

// the components. To modify the code, only use code syntax that matches 
// what Visual Cafe can generate, or Visual Cafe may be unable to back 
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// parse your Java file into its visual environment. 


/I{{INIT_CONTROLS 
setLayout(null); 
' setVisible(false); 
setSize(377,233); 
setBackground(new Color(255)); 
labell = new java.awt.Label("School of Aviation Safety" L Label.CENTER); 
labell .setBounds(60,24,248,2 1); 
labell.setFont(new Font("Dialog", Font. BOLD, 14)); 
label1.setForeground(new Color(16776960)); 
add(label]); 
okButton = new java.awt.Button(); 
okButton.setLabel("OK"); 
okButton.setBounds(156, 156,66,27); 
okButton.setBackground(new Color(12632256)); 
add(okButton); 
label2 = new java.awt.Label("Naval Post Graduate School”, Label. CENTER); 
label2.setBounds(60,48,248,21); 
label2.setFont(new Font("Dialog",, Font. BOLD, 14)); 
label2.setForeground(new Color(16776960)); 
add(label2); 
label3 = new java.awt.Label("Monterey, California",Label. CENTER); 
label3.setBounds(60,72,248,21); 
label3.setFont(new Font("Dialog", Font.BOLD, 14)); 
label3.setForeground(new Color(16776960)); 
add(label3); 
label4 = new java.awt.Label("Phone: 83 1-656- 2581", Label. CENTER); 
label4.setBounds(60,96,248,2 1); 
label4.setFont(new Font("Dialog”, Font.BOLD, 14)); 
label4.setForeground(new Color(16776960)); 
add(label4); 
label5 = new java.awt.Label("E-mail: aciavarelli@nps.navy.mil" ,Label. CENTER); 
label5.setBounds(57, 120,248,21); 
label5.setFont(new Font("Dialog", Font.BOLD, 14)); 
label5.setForeground(new Color(16776960)); 
add(label5); 
setTitle("About”); 
setResizable(false); 


M3} 


/I{{REGISTER_LISTENERS 

Sym Window aSymWindow = new SymWindow(); 
this.addWindowListener(aSym Window); 
SymAction ISymAction = new SymAction(); 
okButton.addActionListener(ISymAction); 


T}} 
} 
public AboutDialog(Frame parent, String title, boolean modal) 
this(parent, modal); | 
setTitle(title); 
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public void addNotifyQ 


// Record the size of the window prior to calling parents addNotify. 
Dimension d = getSize(); 


super.addNotifyQ; 


// Only do this once. 
if (fComponentsAdjusted) 
return; 


 // Adjust components according to the insets 
setSize(insets().left + insets().right + d.width, insets().top + insets().bottom + d.height); 
Component components[] = getComponents(); 
for (int i = 0; i < components.length; i++) 


{ 
Point p = components[i].getLocationQ); 
p.translate(insets().left, insets().top); 
components[i].setLocation(p); 

} 


// Used for addNotify check. 
fComponentsA djusted = true; 


} 
public void setVisible(boolean b) 
{ 
if (b) 
{ 
Rectangle bounds = getParent().bounds(); 
Rectangle abounds = bounds(); 
move(bounds.x + (bounds.width - abounds.width)/ 2, 
bounds.y + (bounds.height - abounds.height)/2); 
} 
super.setVisible(b); 
} : 


Hk {DECLARE CONTROLS 
java.awt.Label labell; 
java.awt.Button okButton; 
java.awt.Label label2; 
java.awt.Label label3; 
java.awt.Label label4; 
java.awt.Label label5; 


M3} 


// Used for addNotify check. 
boolean fComponentsA djusted = false; 


class Sym Window extends java.awt.event.WindowA dapter 
public void windowClosing(java.awt.event. WindowEvent event) 


Object object = event.getSource(); 
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if (object == AboutDialog.this) 
AboutDialog WindowClosing(event); 


} 


void AboutDialog WindowClosing(java.awt.event.WindowEvent event) 


dispose(); 


class SymAction implements java.awt.event.ActionListener 
public void actionPerformed(java.awt.event.ActionEvent event) 


Object object = event.getSource(); 
if (object == okButton) 
okButton_Clicked(event); 


j 


void okButton_Clicked(java.awt.event.ActionEvent event) 


H{ {CONNECTION 
// Clicked from okButton Hide the Dialog 


dispose(); 
/T}} 


} 
} 


E. QUITDIALOG.JAVA SOURCE CODE 


import java.awt.*; 
import java.awt.event.*; 


public class QuitDialog extends Dialog 
public QuitDialog(Frame parent, boolean modal) 


super(parent, modal); 

/E{INIT_ CONTROLS 

setLayout(null); — 

set Visible(false); 

setSize(337,135); 

setBackground(new Color(16711680)); 

yesButton = new java.awt.ButtonQ; 

yesButton.setLabel(" Yes "); 
yesButton.setBounds(72,80,79,22); 
yesButton.setFont(new Font("Dialog", Font. BOLD, 12)); 
yesButton.setBackground(new Color(12632256)); 
add(yesButton); | | 
noButton = new java.awt.ButtonQ; 

noButton.setLabel(" No "); 
noButton.setBounds(185,80,79,22); 
noButton.setFont(new Font("Dialog", Font.BOLD, 12)); 
noButton.setBackground(new Color(12632256)); 
add(noButton); | 
labell = new java.awt.Label("Do you really want to quit?",Label. CENTER); 
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labell .setBounds(48,36,246,23); 

labell .setFont(new Font("Dialog", Font.BOLD, 16)); 
labell setForeground(new Color(16776960)); 
add(label1); 

setTitle("ACSA Survey - Quit"); 

setResizable(false); 

fparent = parent; 


M$} 


/{ {REGISTER_LISTENERS 
Sym Window aSym Window = new SymWindow(); 
this.addWindowListener(aSymWindow); | 
SymAction ISymAction = new SymAction(); 
noButton.addActionListener(ISymAction); 
yesButton.addActionListener(ISymAction); 
I}} 

} 


public void addNotifyQ) 


// Record the size of the window prior to calling parents addNotify. 
‘Dimension d = getSizeQ); 


super.addNotifyQ; | 


if (f(ComponentsAdjusted) 
return; 


// Adjust components according to the insets 
setSize(insets().left + insets().right + d.width, insets().top + insets().bottom + d.height); 
Component components[] = getComponents(); 
for (int i= 0; i< components.length; i++) 
Point p = components[i].getLocationQ; 
p.translate(insets().left, insets().top); 
components{i].setLocation(p); 


fComponentsAdjusted = tue; 


} 
public QuitDialog(Frame parent, String title, boolean modal) 
this(parent, modal); 
setTitle(title); 


/[** 
* Shows or hides the component depending on the boolean flag b. 
* @param b if true, show the component; otherwise, hide the component. 
* @see java.awt.Component#is Visible 
* / . 
public void setVisible(boolean b) 


if(b) 
{ 


Rectangle bounds = getParent().getBounds(); 
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Rectangle abounds = getBounds(); 


setLocation(bounds.x + (bounds.width - abounds.width)/ 2, 
bounds.y + (bounds.height - abounds.height)/2); 


} 
super.setVisible(b); 
j 


// Used for addNotify check. 
boolean fComponentsAdjusted = false; 


//{ {DECLARE CONTROLS 
java.awt.Button yesButton; 
java.awt.Button noButton; 
java.awt.Label label]; 
java.awt.Frame fparent; 


MS} 


class Sym Window extends java.awt.event. WindowAdapter 


public void windowClosing(java.awt.event. WindowEvent event) 


{ 
Object object = event.getSource(); 
if (object == QuitDialog.this) 
QuitDialog WindowClosing(event); 
} 


} 


void QuitDialoe WindowClosing(java.awt.event.WindowEvent event) 


{ 
dispose(); 
} 


class SymAction implements java.awt.event.ActionListener 
public void actionPerformed(java.awt.event.ActionEvent event) 


Object object = event.getSource(Q); 

if (object == noButton) 
noButton_Clicked(event); 

else if (object == yesButton) 
yesButton_Clicked(event); 


} 
void yesButton_Clicked(java.awt.event.ActionEvent event) 
disposeQ); 


fparent.dispose(); 


j 


void noButton_Clicked(java.awt.event.ActionEvent event) 


dispose(); 
j 
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APPENDIX H. ACTIVE SERVER PAGES (ASP) SOURCE CODE 


Because most of the ASP code was self-generated by Visual 
Interdev, this appendix only contains the ASP portion that was 
developed to work in conjunction with the Secure Socket Layer (SSL) 
protocol. The remaining ASP pages can be found in the 
D:\Intetpub\wwwroot\admin subdirectory of the spitfiremachine. These files 
either begin with the prefix SurveyNumbers, which are used with the 


Num_List_DB, or by Survey, which are used with the Survey2_DB. 


<%@ LANGUAGE="VBSCRIPT" %> 
<!--#include file="ADOVBS.INC" --> 
Survey2_DB_ConnectionString = "DSN=Survey2_DB;Description=Survey 
Database;SER VER=SPITFIRE;UID=sa;PWD=;APP=Microsoft (R) Developer 
Studio; WSID=SPITFIRE;DATABASE=Survey2_DB" 
DB_ConnectionTimeout = 15 
DB_CommandTimeout = 30 
DB _RuntimeUserName = "sa" 
DB_RuntimePassword = "" 


Num_List_DB_ConnectionString = "DSN=Num_List;Description=squadron survey access 
listing; SER VER=SPITFIRE;UID=sa;PWD=;APP=Microsoft (R) Developer 
Studio; WSID=SPITFIRE;DATABASE=Num_List_DB" 


Set connection = Server.CreateObject("ADODB.Connection") 

connection.ConnectionTimeout = DB_ConnectionTimeout 

connection. CommandTimeout = DB_CommandTimeout 

connection.Open Num_List DB | ConnectionString, DB_RuntimeUserName, DB _ RuntimePassword 


community = Request.Form("community") 
squadron_number = Request.Form("squadron_number") 
survey_number = Request.Form("survey_number") 
rank = Request.Form("rank") 

designator = Request.Form("designator") 
flight_hours = Request.Form("flight hours") 
type_hours = Request.Form("type_hours") 
dept_head = Request.Form("dept_head") 

status = Request.Form("status") 

service = Request.Form("service” 

location = Request.Form("location") 


concatString = community & squadron_number 
valid_survey = false 

start_ number = -1 

stop_number = -] 


query = "SELECT * FROM NUM_LIST WHERE Unit_ID =" & concatString & "" 


Set records = Server. CreateObject("ADODB. RecordSet") 
Set records = connection.Execute (query, RecordsAffected, adCmdText) 
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if (NOT (records.EOF)) then 
for each field in records.Fields 
if field. Name = "Start_ Number" then 
start_number = CInt(field. Value) 
end if 
if fieldName = "End_ Number” then 
stop_number = Cint(field. Value) 
end if 
~ next 
if (CInt(survey_number) >= start_number) AND (CInt(survey_number) <= stop_number) then 
valid_survey = true 
else 
Response.Redirect "https://spitfire.avsafety.nps. navy. mil/NumberError.html" 
. endif 
end if 


connection.Close 


if (valid survey) then 
connection.Open Survey2_DB_ ConnectionString, DB_RuntimeUserName, DB_RuntimePassword 
biodata = "INSERT INTO Biographical Data VALUES ("" & community & "," &_ 
squadron_number & "," & survey_number & "," & rank & ",'"" & designator Ce a 
flight hours & "," & type . hours & ",'" & dept __ head Cr & status & '",'" & service &™ "& 
location & "')" 


question] = Request.Form("question1") 
question2 = Request.Form("question2") 
question3 = Request.Form("question3") 
question4 = Request.Form("question4") 
question = Request.Form("question5") 
question6 = Request.Form("question6") 
question7 = Request.Form("question7") 
question8 = Request.Form("question8") 
question9 = Request.Form(""question9") 
question10 = Request.Form("question10") 
question] 1 = Request.Form("question1 1") 
question12 = Request.Form("question12") 
question!3 = Request.Form("question13") 
question] 4 = Request.Form("question14") 
question! 5 = Request.Form("question15") 
question 16 = Request.Form("question16") 
question17 = Request.Form("question!7") 
question18 = Request.Form("question18") 
question!19 = Request.Form("question19") 
question20 = Request.Form("question20") 
question2 1 = Request.Form("question2 1") 
question22 = Request.Form("question22") 
question23 = Request.Form("question23") 
question24 = Request.Form("question24") 
question25 = Request.Form("question25") 
question26 = Request.Form("question26") 
question27 = Request.Form("question27") 
question28 = Request.Form("question28") 
question29 = Request.Form("question29") 
question30 = Request.Form("question30") Pa : “ 
question3 1 = Request.Form("question3 1") 
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question32 = Request.Form("question32”) 
question33 = Request.Form("question33") 
question34 = Request.Form("question34") 
question35 = Request.Form("question35") 
question36 = Request.Form("question36") 
question37 = Request.Form("question37") 
question38 = Request.Form("question38") 
question39 = Request.Form("question39") 
question40 = Request.Form("question40") 
question41 = Request.Form("question41") 
question42 = Request.Form("question42") 
question43 = Request.Form("question43") 
question44 = Request.Form("question44") 
question45 = Request.Form("question45") 
question46 = Request.Form("question46") 
question47 = Request.Form("question47") 
question4§8 = Request.Form("question48") 
question49 = Request.Form("question49") 
questionS0O = Request.Form("question50") 
questions 1 = Request.Form("question5 1") 
- question52 = Request.Form("question52") 
questionS3 = Request.Form("question53") 
question54 = Request.Form("question54") 
questionS5 = Request.Form("question55") 
-question56 = Request.Form("question56") 
questionS7 = Request.Form("questionS7") 
question58 = Request.Form("question58") 
question59 = Request.Form("question59") 
question60 = Request.Form("question60") 
question61 = Request.Form("question61!") 


questiondata = "INSERT INTO Questions VALUES (‘" & community & '"," & 

squadron_number & "," & survey_number & "," & _ 

question! & "," & question2 &"" & question3 &"" & questions & "," & _ 

questions & " " & question6 & ", nm & question7 & ", nm & question’ & ", "a & question9 & "," & _ 

question!0 & ", mn & question 1 1 & "," & question12 & ""& question13 Go" & 

question14 & ", nn & question!5 & ", nn & question16 & ", nm & question!7 & " " & 

question!§ & ", wn & question19 & " " & question20 & " " & question21 & " " & 

question22 & " " & question23 & " " & question24 & ", wm & question25 & " 7 & 

question26 & ", ” & question27 & ", "n & question28 & " " & question29 & " : & 

question30 & " " & question31 & ", nn & question32 & ", nm & question33 & ", nm & 

question34 & ", nn & question35 & " " & question36 & " " & question37 & " ” & 

question38 & ", nm & question39 & " " & question4O & ", nm & question41 & ", wn & 
question42 & ", nm & question43 & ", nn & question44 & a " & question4s & " sO 
question46 & ns & question47 & nn & question48 & nn & question49 & nn ce 
questionSO & "," & questionS1 & "," & questionS2 & ",” & question53 & "," &_ 
questionS4 & "," & questionS5 & "," & questionS6 & "," & questionS7 & "," &_ 
question58 & "," & questionS59 & "," & question60 & "," & question6l & ")" 


connection.BeginTrans 
connection.Execute biodata, RecordsAffected, adCmdText 
connection.Execute questiondata, RecordsA ffected, adCmdText 
If connection.Errors.Count = 0 then 
connection.CommitTrans 
connection.Close 
Response.Redirect "https://spitfire.avsafety.nps.navy.mil/ThankY ou.html" 
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else 
connection.RollbackTrans 
connection.Close 

end if 


else 

Response.Redirect "https://spitfire.avsafety.nps.navy.mil/NumberError.htm|" 
end if 

%> . 

<HTML><HEAD><TITLE>Processing survey data</TITLE></HEAD> 
<BODY> | 
</BODY> 

‘</HTML> 
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APPENDIX I. ACSA PROJECT DIRECTORY STRUCTURE 


Directory of D:\Inetpub\wwwroot 


(ose sores [admin] | [cgi-bin] 
[classes] | default.asp file file2 
filupl-alpha.cab flup1l-x86.cab flupl.cab  Fortune.html 
[Help] [images ] index.asp [manual] 
NumberError.html POSTINFO.EG postinfo.html fResults] 
[secureSurvey] [security] [servletrunner] [SERVLETS] 
[sounds ] [Survey] [surveyadmin] ThankYou. html 
[time] wpiel5-alpha.cab wpiel5-x86.cab [ private] 

32 File(s) 2,133,903 bytes 


Directory of D: \Inetpub\wwwroot \admin 


ia ore, default html 


global.asa. [images] | SurveyAction.asp 
SurveyForm.asp SurveyList.asp | SurveyNumbersAction.asp 
SurveyNumbersForm.asp SurveyNumbersList.asp 

11 File(s) 163,713 bytes 


‘Directory of D:\Inetpub\wwwroot \admin\images 


[.] [oe] administrator.gif Back3.gif 

line.gif NAV1.JPG point:.gif smblue_rock.gif 

vertical line.gif . ee 8G Se ) 
9 File(s) 21,692 bytes 


Directory of D:\Inetpub\wwwroot\admin\ vti_bin 


fpcount.exe shtml.dil | 
2 File(s) 121,616 bytes 


Directory of D:\Inetpub\wwwroot\admin\ vti_bin\_vti_adm 


admin.dll 
1 File(s) 15,120 bytes 


Directory of D:\Inetpub\wwwroot\admin\ vti_bin\_vti_aut 


author.dll dvwssr.dll : 
| 2 File(s) 21,536 bytes : ! 


Directory of D:\Inetpub\wwwroot\admin\ vti_cnf 
global.asa | | SurveyNumbersAction.asp SurveyNumbersForm.asp 
SurveyNumbersList.asp — 
4 File(s) 3,354 bytes 
Directory of D:\Inetpub\wwwroot\admin\_vti_pvt 
access.cnf deptodoc.btr doctodep.btr linkinfo.cnf service.cnf 


service.lck , | 
: 6 File(s) 7,461 bytes 
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Directory of D:\Inetpub\wwwroot\cgi-bin 


[.] [ennai : Count.exe extdgts.exe 
htimage.exe imagemap.exe mkstrip.exe mkstrip.txt 
10 File(s) 277,438 bytes 


Directory of D:\Inetpub\wwwroot\cgi-bin\wcount 


f.] ren [conf] [data] [digits] [logs] 
7 File(s) 16,992 bytes 


Directory of D:\Inetpub\wwwroot\cgi-bin\wcount\conf 


at Cee count.cfg 
3 File(s) - 1,521 bytes 


Directory of D:\Inetpub\wwwroot\cgi-bin\wcount\data 


faa ree] | count.dat sample.dat 
4 File(s) | 30 bytes 


Directory of D:\Inetpub\wwwroot\cgi-bin\wcount\digits 


[-}] {..] [A] [B] [c] [D] [E&] , 
7 File(s) O bytes 


Directory of D:\Inetpub\wwwroot\cgi-bin\wcount\digits\A 


Pes [..] Strip. oir [ vti_cnf] 
4 File(s) 494 bytes 





extdgts.txt 
[wcount ] 


ZGD<ERE 


Directory of D:\Inetpub\wwwroot\cgi-bin\weount\digits\A\ vti_cnf 


[.] Pod strip.gif 
3 File(s) | 265 bytes 


Directory of D:\Inetpub\wwwroot\cgi-bin\wcount\digits\B 


[.] | — Strip<git. [ weicenti 
4 File(s) 2,942 bytes 


Directory of D: \Inetpub\wwwroot\cgi-bin\wceount\digits\B\ vti_cnf 


[ed een | Strip<gif 
3 File(s) 266 bytes 


Directory of D: \Inetpub\wwwroot \cgi-bin\wcount\digits\C 


i esl eee Strip-¢g2£ [ wit cnt] 
4 File(s) 1,178 bytes - 


Directory of D: \Inetpub\wwwroot \cgi-bin\weount\digits\C\_vti_enf 


( (eo ' gstrip.gif | 
3 File(s) . 266 bytes 
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Directory 


[.] 


Directory 


[ee] 


Directory 


[.] 


Directory 


[.] 


Directory 


[.] 


. Directory 


 Count.exe’ 


Directory 


[.] 


fprotate.class 


Directory 


[.] 


Directory 


[.] 


Directory 


[.] 


help.hl.jpg 
servleterrorl.jpg 


Directory 


[.] 


help.hl.jpg 


of 


of D: \Inetpub\wwwroot\cgi-bin\wcount\digits\D 


strip.gif (Ver ont} 


27,387 bytes 


[..] 
5 File(s) 


lenna.gif 


of D:\Inetpub\wwwroot\cgi-bin\wcount\digits\D\ vti_cnf 


SELIpsgi=t 
532 bytes 


lenna.gif 


bx] 
4 File(s) 


of D:\Inetpub\wwwroot\cgi-bin\wcount\digits\E 


ial 
4 File(s) 


strip.gif [ -Veient] 


197 bytes 
of D:\Inetpub\wwwroot\cgi-bin\wcount\digits\E\ vti_cenf 


iva] Strip.¢git 


3 File(s) 265 bytes 


of D:\Inetpub\wwwroot\cgi-bin\wcount\logs 


a) Count24.log 


3 File(s) 2,379 bytes 
of D:\Inetpub\wwwroot\cgi-bin\ vti_cenf 


imagemap.exe 
715 bytes 


htimage.exe 
3 File(s) 


of D:\Inetpub\wwwroot\classes 
biased: 2 fphover.class 
fprotatx.class LScrollText.class 
8 File(s) 28,2065 bytes 


of D:\Inetpub\wwwroot\classes\ vti_cnf 


] fphover.class 
216 bytes 


(es 
4 File(s) 


D: \Inetpub \wwwroot \Help 


{images ] 
15,837 bytes 


hee] 
5 File(s) 


Help. html [vei cnet] 


of D:\Inetpub\wwwroot\Help\images 
Console.jpg 
help.h2.jpg help.h3.jpg 
servleterror2.jpg [ VEL -cne | 
229,930 bytes 


[..] 


11 File(s) 


of D: \Inetpub\wwwroot \Help\images\ vti_cnf_ 
eal Console.jpg 
help.h2.jpg help.h3.jpg 
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fphoverx.class 
f Vt2.-cnt} 


LScroliText.class 


display.jpg 
results.jpg 


display.jpg 
results.jpg 


servleterrorl.jpg 
10 File(s) 


servleterror2.jpg 


2,424 bytes 


Directory of D:\Inetpub\wwwroot\Help\ vti_cnf 


[.] [..] 
3 File(s) 


Help.html 


796 bytes 


Directory of D:\Inetpub\wwwroot\images 


[-] [.-] 

flag2.gif NEW. gif 

telephone.gif 
13 File(s) 


WARNING2.GIF 


bnewb.gif 
Sh-60. jpg 


BACK1.JPG 
security.gif 
L veo. ccnk) 
135,511. bytes 


Directory of D:\Inetpub\wwwroot\images\ vti_cnf 


[.] [..] 
sumtextb.jpg 
8 File(s) 


telephone.gif 


BACK1. JPG 
WARNING2.GIF 
1,767 bytes 


F18.4jpg 


Directory of D:\Inetpub\wwwroot\manual 


[.] 
bind. html 
content-negotiation.html 
dns-caveats.html 
ebcdic. html 
footer. html 
header. html 
index.html . 
invoking.html 
LICENSE 
man-template.html 

[mod] 
new features 1 0-.html 
_new_features 1 2.html 

process~-model .html 
sourcereorg. html 
suexec. html 
upgrading to 1 3.html 
windows .html 

38 File(s) 


[..] 
cgi_path-html 
custom-error.html 
dso.html 
env. html 
handler. html 
[images] 
install.html 
keepalive. html 
location.html 
[misc] 
multilogs.html 
new features 1 1.html 
new features 1 3.html 
sections. html 
stopping. html 
unixware.html 
[vhosts] 
{Ver ene] 

255,375 bytes 


Directory of D:\Inetpub\wwwroot \manual\images 


[.] [--] 


home.gif index.gif 
mod rewrite figl.gif mod_rewrite _fig2.fig mod_rewrite_figz. 
sub.gif [ vel <ent] 

11 File(s) 42,478 bytes 


custom_errordocs. 
mod_rewrite figl. 


Directory of D:\Inetpub\wwwroot \manual\images\ vti_cnf 


[.] | Es 
index.gif 
sub.gif 


home.gif 
mod rewrite fig2.gif 


custom_errordocs 
mod rewrite figl. 
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Fi8.jpg 
sumtextb.jpg 


Sh-60.jpg 


gif 
Eig 
gif 


Pace fla 


gif 





8 File(s) 





9,427 bytes 


Directory of D:\Inetpub\wwwroot\manual\misc 


[.] 
API.html 
compat _notes.html 
descriptors.html 
fin wait 2.html 
header. html 
HTTP Features.tsv 
known _client_problems.html 
perf-bsd44.html 
perf-hp.html 
perf.html 
vif-info.html 
[ vti_cnf] 
25 File(s) 


bees 
client block _api.html 
custom_errordocs.html 
FAQ. html 

footer.html 
howto.html 

index.html 

nopgp.html 


perf-dec. html 


perf-tuning.html 
security _tips.html 
windoz keepalive.html 


321,774 bytes 


Directory of D:\Inetpub\wwwroot\manual\misc\_vti_cnf 


[.] 

API .html 

compat notes.html 
descriptors.html 

fin wait _2.html 

header. html 

HTTP Features.tsv 

known _client_problems.html 
perf-bsd44.html | 
perf-hp.html 
perf. html 
vif-info.html 
24 File(s) 


Les] | 

client block_api.html 

custom _errordocs.html 

FAQ.html 

footer. html 

howto.html 

index.html 

nopgp.html 

perf-dec.html 

perf-tuning.html 

security tips.html 

windoz keepalive.html 
22,566 bytes 


Directory of D:\Inetpub\wwwroot \manual\mod 


[.] [..] 
directive-dict.html 
header -html 
mod actions.html 
mod auth.html 
mod auth_dbm.html 
mod _cern_meta.html 
mod digest .html 
mod dll.html 
mod_expires.html 
mod include.html 
mod log agent.html 
mod log referer.html 
mod mmap_ static.html 
mod rewrite.html 
mod speling.html 
mod userdir.html 

ol File(s) 


directives.html 
index.html 

mod alias.html 
mod_auth_anon.html 
mod_autoindex. html 
mod cgi.html 

mod dir.html 

mod _env.html 

mod headers.html 
mod_info.html 

mod log common.html 
mod _mime.html 

mod negotiation. html 
mod setenvif.html 
mod status.html 
mod _usertrack. html 


core.html 

footer. html 

mod access.html 
mod asis.html 

mod auth_db.html 
mod browser. html 
mod cookies.html 
mod did.html 

mod example.html 
mod _imap.html 

mod _isapi.html 

mod log config.html 
mod mime magic.html 
mod _proxy.html 
mod_so.html | 

mod unique _id.html 
[ vti_cnf] 

523,018 bytes 


Directory of D:\Inetpub\wwwroot\manual\mod\ vti_cnf 
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] core.html | 
footer. html 

mod _access.html 

mod asis.html 

mod auth_db-html 
mod browser.html 
mod cookies.html 
mod _did.html 

mod example.html 
mod imap.html 
mod_isapi.html 

mod log config.html 
mod mime magic.html 
mod proxy.html 

mod _so.html | 

mod unique id.html 


[.] [.. 
directive-dict.html directives.html 
header .html index.html 
mod actions.html mod alias.html 
mod auth.html mod auth_anon.html 
mod auth_dbm.html mod autoindex.html 
mod cern meta.html mod_cgi.html 
mod digest.html mod dir.html 
_ mod _dil.html mod _env.html 
mod _expires.html mod headers.html 
mod include.html mod _info.html | 
mod log agent.html mod log _common.html 
mod log referer.html mod_mime.html 
mod mmap static.html mod_negotiation.html 
mod rewrite.html mod _setenvif.html 
mod speling.html mod _status.html 
mod _userdir.html mod _usertrack.html 
50 File(s) 71,876 bytes 


Directory of D:\Inetpub\wwwroot\manual\vhosts 


details. html 
fd-limits.html 


[.] [--] | 
details 1 2.html examples.html 


footer.html header. html host.html 
index.html ip-based. html name-based. html 
vhosts-in-depth.html virtual-host.html [ vti_cnf] 


15 File(s) 100,154 bytes 


Directory of D:\Inetpub\wwwroot\manual\vhosts\_vti_cnf 


fea eras | details. html 
details 1 2.html examples.html fd-limits.html 
footer. html header .html host.html 
index.html ip~based. html name~based. html 
vhosts-in-depth.html virtual—-host.html 

14 File(s) 10,005 bytes 


Directory of D:\Inetpub\wwwroot\manual\_vti_cnf 
[.] [..] 


bind.html cgi_path.html 
content-negotiation.html custom-error.html 


dns-caveats.html dso. html 
ebcdic.html env. html 
footer. html handler. html 
header. html index.html 
install.html invoking.html 
keepalive. html LICENSE 


location.html 
multilogs.html . 
new features 1. 1.html 


new features 1 3.html 7 


sections.html 
stopping-html 
unixware.html 
windows. html 


man-template.html 


new features 1 0.html 
new features 1 2.html 


process-model .html 
sourcereorg. html 


suexec.html 


upgrading to _1 3.html 
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33 File(s) 25,322 bytes 


Directory of D:\Inetpub\wwwroot\Results 


[.] | ee [classes] [images] queen.mid 
Results.bak Results.html [ vti_cnf] : 
| 8 File(s) 26,195 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes 


lesan’ | eee [connect] 
Results$Symitem.class Results$SymMouse.class Results.class 
Results.java [symantec] _ [weblogic] 

9 File(s) | 89,327 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\connect 


i | Vitee [license] [microsoft] [sybase] 
5 File(s) QO bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\connect\license 


C4 Faia) License.class 
LicenseException.class LicenseManager.class LicenseRecord.class 
6 File(s) 5,890 bytes : 


Directory of D:\Inetpub\wwwroot \Results\classes\connect\microsoft 


[4 | Ete) MicrosoftDriver.class 
3 File(s) 175 bytes 7 


Directory of D:\Inetpub\wwwroot \Results\classes\connect\sybase 


ee few] . SybaseDriver.class 
} 3 File(s 166 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\symantec 


taal fice [beans] [dti] fitools] [tools] 
6 File(s) 0 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\beans 


[.] [..] Beans.class 
3 File(s) 734 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\symantec\dti 


[.] 

[..] 

BogusComponent.class 
ComboBoxDesignTimelInterface.class 
ControlDesignTimeInterface.class 
CustomPropEditFrame.class 
DefaultAwtComponentDesignTimeInterface.class 
DefaultAwtPanelDesignTimeInterface.class 
EventInfo.class : 
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EventParaminfo.class 
JBlenderFrame.class 
JBlenderFrameCreateParams.class 
JBlenderMain.class 
JBlenderPanel.class 
JBlenderPanelGridinfo.class 
JBlenderReqQueue.class 
JBlenderRequest.class 
JClassLoader.class 
JCustomPropFrame.class 
JDebugStr.class 
JInvokeThread.class 
NewrFont.class 
Propinfo.class 
PropInfoBoolean.class 
PropInfoCharacter.class 
PropiInfoColor.class 
PropInfoCustom.class 
PropInfoDouble.class 
PropInfoDynamic.class 
PropinfoEnum.class 
PropInfoFont.class 
PropinfoInteger.class 
PropinfolInterface.class 
PropiInfoString.class 
PropInfoStringArray.class 
PropinfoURL.class 
- PropMethod.class 
Queue.class 
ScrollingNamesSJPActionHandler.class 
ScrollingNames$SymComponent.class 
ScrollingNames.class 
ScrollingPanelDesignTimeInterface.class 
SlideShowDesignTimeiInterface.class 
StarMain$SymWindow.class 
StarMain.class 
Sstars.gif 
StdAwtButtonDesignTimeInterface.class 
StdAwtCheckboxDesignTimeInterface.class 
StdAwtChoiceDesignTimeInterface.class 
StdAwtLabelDesignTimeInterface.class 
StdAwtScrollbarDesignTimeInterface.class 
StdAwtTextAreaDesignTimeInterface.class 
StdAwtTextComponentDesignTimelInterface.class 
StdAwtTextFieldDesignTimeInterface.class 
symName.class 
TabPanelDesignTimeInterface.class 
TestFrame.class | 
TreeViewDesignTimeInterface.class 
Ver oem eee Be ee eer eens class 
VCFormCompListenerSItem.class 
VCFormCompListener.class 
WrappingLabelDesignTimeInterface.class 
[ vti_cnf] 

63 File(s) 111,563 bytes 


Directory of D: \Inetpub\wwwroot \Results\classes\symantec\dti\ vti_cnf 
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{.) ¢ [..] 
3 File(s) 


stars.gif 


265 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\itools © 


[-] ae oe [awt] 
[lang] [multimedia] [net] 
11 File(s) 


[beans] [dab] : {demo ] 
[util] [vcafe] 
O bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\itools\awt 


[.] 

AlignStyle.class 
BaseTabbedPanelSMouse.class 
BaseTabbedPanelBeanInfo.class 
BorderPanel$Veto.class 
BorderPanelBeanInfo.class 
BorderPanelC32.gif 
ButtonBaseS$BevelVeto.class 
ButtonBaseSFrameVeto.class 
ButtonBase$Mouse.class 
ButtonBaseBeanInfo.class 
ComboBoxSFocus.class 
ComboBoxSKeyBox.class 
ComboBox$Mouse.class 
ComboBoxBeanInfo.class 
ComboBoxC32.gif 
CompareFunc.class 
DirectionButtonSIndntVeto.class 
DirectionButton.class . 
DirectionButtonCl16.gif 
FormattedTextField$Key.class 
FormattedTextFieldBeanInfo.class 
FormattedTextFieldC32.gif 
HorizontalSliderSMouseMtn.class 
HorizontalSliderBeanInfo.class 
HorizontalSliderC32.gif 
HorizontalSliderThumbBot.class 
HorizontalSliderThumbTop.class 
ImageButton$StyleVeto.class 
ImageButtonBeanInfo.class 
ImageButtonC32.gif 
ImageHTMLLinkBeaninfo.class 
ImageHTMLLinkC32.gif 
ImageListBox$Key.class 
TImageListBox$SMouseMotion.class 
ImageListBoxBeanInfo.class 
ImageListBoxC32.gif 
ImagePanelBeanInfo.class 
ImagePanelC32.gif 
InvisibleButtonS$Mouse.class 
InvisibleButtonBeanInfo.class 
InvisibleButtonC32.gif 
InvisibleHTMLLink$Mouse.class 
InvisibleHTMLLinkBeanInfo.class 
InvisibleHTMLLinkC32.gif 


wAleer ae 


BaseTabbedPanelSAction.class 
BaseTabbedPanel.class 
BevelStyle.class 
BorderPanel.class 


' BorderPanelCi6.gif 


ButtonBaseSAction.class 
ButtonBaseSFocus.class 
ButtonBaseSKey.class 
ButtonBase.class 
ComboBox$Action.class 
ComboBoxSItem.class 
ComboBoxSKeyList.class 
ComboBox.class 
ComboBoxC16.gif 
CompareCells.class 
CompareFuncCB.class 7 
DirectionButton$SizeVeto.class 
DirectionButtonBeanInfo.class 
DirectionButtonC32.gif - 
FormattedTextField.class 
FormattedTextFieldc1l6.gif 
HorizontalSliderSMouse.class 
HorizontalSlider.class 
HorizontalSliderCi6é.gif 
HorizontalSliderThumb.class 
HorizontalSliderThumbBoth.class 


[image] 


ImageButton.class 
ImageButtonCl6.gif 
ImageHTMLLink.class 
ImageHTMLLinkCl16.gif 
ImageListBoxSAdjustment.class 
ImageListBox$SMouse.class 
ImageListBox.class 
ImageListBoxCl6.gif 
ImagePanel.class 
ImagePanelCl6.gif 
InvalidTreeNodeException.class 
InvisibleButton.class 
InvisibleButtonCl6.gif 
InvisibleHTMLLinkSAction.class 
InvisibleHTMLLink.class 
InvisibleHTMLLinkC16.gif | 
KeyPressManagerPanelSA.class 
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KeyPressManagerPanel$K.class 
KeyPressManagerPanelBeaninfo.class 
KeyPressManagerPanelC32.gif 
Label3DBeaninfo.class 
Label3DC32.gif 
LabelButton$VAVeto.class 
LabelButtonBeanInfo.class 
LabelButtonC32.gif 
LabelHTMLLinkBeanInfo.class 
LabelHTMLLinkC32.gif 
Matrix.class 
[multiList] 
MultiList$Focus.class 
MultiList$Mouse.class 
MultiList.class 
MultiListC16.gif 
Orientation.class 
RadioButtonGroupPanelBeanInfo.class 
RadioButtonGroupPanelC32.gif 
RollOverButton$MouseMtn.class 
RollOverButtonBeanInfo.class 
RollOverButtonC32.gif 
ScrollingPanelBeaninfo.class 
ScrollingPaneiC32.gif 
Slider.class 
SliderTick.class 
SplitterPanelSMouseMtn.class 
SplitterPanel.class 
SplitterPanelC16.gif 
StateCheckBox$Mouse.class 
StateCheckBoxBeanInfo.class 
StateCheckBoxC32.gif 
StatusBarBeanInfo.class 
StatusBarC32.gif 
TabPanel.class 
TabPanelC16.gif 
TransparencyTrick.class 
TreeNode.class 
TreeViewSFocus.class 
TreeViewSMouse.class 
TreeViewBeaninfo.class 
TreeViewC32.gif 
VerticalSlider$Mouse.class 
VerticalSlider.class 
VerticalSliderCl6.gif 
VerticalSliderThumb.class 
VerticalSliderThumbLeft.class 
WrappingLabel.class 
WrappingLabelCl16.gif 
[. vt. cnt] 

189 File(s) 





KeyPressManagerPanel.class 
KeyPressManagerPanelCl6.gif 
Label3D.class 
Label3DC16.gif 

Label ButtonSHAVeto.class 


LabelButton.class 


LabelButtonC16.gif 
LabelHTMLLink.class 
LabelLHTMLLinkC1l6.gif 
ListItem.class 
MatrixEnumeration.class 
MultiListSAdjustment.class 
MultiList$Key.class 
MultiList$MouseMotion.class 
MultiListBeanInfo. class 
MultiListC32.gif | 
RadioButtonGroupPanel. class 
RadioButtonGroupPanelCl6.gif 
RollOverButton$Mouse.class 
RollOverButton.class 


RollOverButtonc16.gif 


ScrollingPanel.class 
ScrollingPanelC16.gif 


[shape] 


SliderBeaniInfo.class 
SplitterPanelSMouse.class 
SplitterPanel$STVeto.class 
SplitterPanelBeaninfo. class 
SplitterPanelC32.gif 
StateCheckBox.class 
StateCheckBoxC16.gif 
StatusBar.class 
StatusBarCl6.gif 
TabPanel$PropertyChange. class 
TabPanelBeanInfo.class 
TabPanelC32.gif 
TransparencyTrickUtils.class 
TreeViewSAdjustment.class 
TreeViewSKey.class 
TreeView.class 
TreeViewC16.gif 

[util] , 
VerticalSliderSMouseMtn.class 
VerticalSliderBeanInfo.class 
VerticalSliderC32.gif 
VerticalSliderThumbBoth. aiees 
VerticalSliderThumbRight.class 
WrappingLabelBeaninfo.class 
WrappingLabelC32.gif 


652,892 bytes 


Directory of D: \Inetpub \wwwroot \Results\classes\symantec\itools\awt \image . 


Del BStcsi| 
FadeFilter.class 
5 File(s) 


DarkenFilter.class 


LightenFilter.class 
| 7,631 bytes 
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Directory of D: \Inetpub\wwwroot \Results\classes\symantec\itools\awt\multiLlist 


ta 

Cell.class 

TextAndimageCell. class 
5 File(s) 





[..] 
CompareTextAndImageCelis.class 


4,490 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\symantec\itools\awt\shape 


[-] 

Circle.class 
Circleci¢6.gift 
Ellipse.class 

. BllipseCl6.gir£ 
HorizontalLine.class 
HorizontalLineCl6.gif 
Line.class 
LineClé6.gif 
Rect.class 
RectCl6.gif 
Shape.class 
Square.class 
SquareC1l6.gif 
VerticalLine.class . 
VerticalLineClé.gif 
[-Veavcnt! 
33 File(s) 


Directory of 


Lace | 
CircleBeaniInfo.class 
CircleC32.gif 
EllipseBeanInfo.class 
EllipseC32.gif 
HorizontalLineBeanInfo. class 
HorizontalLineC32.gif 
LineBeanInfo.class 
LineC32.gif 


 RectBeanInfo.class 


RectCs2.gqif 
ShapeBeanInfo.class 
SquareBeaniInfo.class 
SquareC32.gif 
VerticalLineBeanInfo.class 


VerticalLineC32.gif 


47,004 bytes 


D: \Inetpub\wwnroot \Result s\classes\synantec\itools\awt \shape\ _ vti_cnf 


[.] 
CircleC32.gif . 
HorizontalLineC1l6.gif 
LineC32.gif 
SquareCl6.gif 
VerticalLineC32.gif 

16 File(s) 


er 7 
EllipseC16.gif 
HorizontalLineC32.gif 
RectClé.gif 
SquareC32.gif 


CircleCl6.gif 
EllipseC32.gif 
LineC16.gif 
RectC32.gif 
VerticalLineCl6.gif 


3,710 bytes 


Directory of D: \Inetpub\wwwroot \Results\classes\symantec\itools\awt\util | 


[.] 

CalendarSAction.class 
Calendar.class 
CalendarC16.gif 
ColorUtils.class 

[edit] 
ProgressBarBeanInfo.class 
ProgressBarC32.gif 
StatusScroller.class 
StatusScrollerCl6é.gif 
ToolBarPanelSVeto.class 
ToolBarPanelBeanInfo.class 
ToolBarPanelC32.gif 
ToolBarSpacer.class 
ToolBarSpacerCl6.gif 


[.-] 


CalendarSMouse.class 


CalendarBeanInfo.class 


CalendarC32.gif 

[dialog] 

ProgressBar.class 
ProgressBarCl6.gif 
[spinner] 
StatusScrollerBeaninfo.class 
StatusScrollerC32.gif 
ToolBarPanel.class 
ToolBarPanelCl6.gif 
ToolBarSpacerSVeto.class 
ToolBarSpacerBeanInfo.class 
ToolBarSpacerC32.gif 
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Util.class 
32 File(s) 





[ ves cnt | 
93,195 bytes 


Directory of D: \Inetpub\wwwroot \Results\classes\symantec\itools\awt\util\dialog 


[.] [..] 
4 File(s) 


eee ee class ModalDialog.class_ 


2,449 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\itools\awt\util\edit 


[.] 


AddressCode.class 


IntliLongDistPhoneNumber.class 
IntlLongDistPhoneNumberC1l6.gif 


LocalPhoneNumber.class 
LocalPhoneNumberC16.gif 
LongDistPhoneNumber.class 
LongZipCode.class 
LongZipCodeC16.gif 
PhoneNumber.class 
PostalCode.class 
PostalCodeC16.gif 
SocialIDNumber.class 
SocialInsuranceNumber.class 
SocialInsuranceNumberCl6.gif 
SocialSecurityNumber.class 
SocialSecurityNumberCl6.gif 
USLongDistPhoneNumber.class 
USLongDistPhoneNumberC16.gif 
ZipCode.class 

ZipCodeCl6é.gif 


[-.] 

AddressCodeBeaninfo.class 
IntlLongDistPhoneNumberBeanInfo.class 
IntlLongDistPhoneNumberC32.gif 
LocalPhoneNumberBeanInfo.class 
LocalPhoneNumberC32.gif 3 
LongDistPhoneNumberBeanInfo.class 


- LongZipCodeBeanInfo.class 


LongZipCodeC32.gif 
PhoneNumberBeanInfo.class' 
PostalCodeBeanInfo.class 
PostalCodeC32.gif 
SocialIDNumberBeanInfo. class 
SocialInsuranceNumberBeaniInfo.class 
SocialInsuranceNumberC32.gif 
SocialSecurityNumberBeaniInfo.class 
SocialSecurityNumberC32.gif 
USLongDistPhoneNumberBeaninfo.class 
USLongDistPhoneNumberC32.gif 
ZipCodeBeaninfo.class 
ZipCodeC32.gif 


[ vti_cnzt] 
43 File(s) ' 44,980 bytes 


Directory of 
D: \Inetpub \wwwroot \Results\classes\symantec\itools\awt \util\edit\_ vti ont 


[.] [se | | 
IntlLongDistPhoneNumberCl6.gif IntlLongDistPhoneNumberC32.gif 
LocalPhoneNumberC16.gif LocalPhoneNumberC32.gif 
LongZipCodeC16.gif LongZipCodeC32.gif 
PostalCodeC16.gif PostalCodeC32.gif 


SocialInsuranceNumberCl6.gif SocialInsuranceNumberC32.gif 
SocialSecurityNumberCl6.gif SocialSecurityNumberC32.gif 
USLongDistPhoneNumberCl16.gif USLongDistPhoneNumberC32.gif 
ZipCodeC16.gif ZipCodeC32.gif 

18 File(s) 4,240 bytes 


Directory of 
De \ Inet pub \wwwroot \Results\classes\symantec\itools\awt \util\spinner | 


[.] [..] | 
DaySpinner.class | DaySpinnerBeanInfo.class 
DaySpinnerCl16.gif DaySpinnerC32.gif 
HorizontalSpinButtonPanel. ise ListSpinner.class 
ListSpinnerBeaniInfo.class ListSpinnerCl6.gif 
ListSpinnerC32.gif _ MonthSpinner.class 
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MonthSpinnerBeanInfo.class MonthSpinnerCl6.gif 


MonthSpinnerC32.gif NumericSpinner.class 
NumericSpinnerBeaninfo.class NumericSpinnerCl6.gif 
NumericSpinnerC32.gif SpinButtonPanelSAction.class . 
SpinButtonPanel.class SpinnerSAction.class 
SpinnerSCurrentVeto.class SpinnerSMaxVeto.class 
SpinnerSMinVeto.class Spinner.class 
SpinnerBeanInfo.class VerticalSpinButtonPanel.class 


[-Vti.-cnt] 
29 File(s) 74,491 bytes 


Directory of 
D: \Inetpub\wwwroot \Results\classes\symantec\itools\awt\util\spinner\ vti_cnf 


oe Lees DaySpinnerCl6.gif 
DaySpinnerC32.gif ListSpinnerC16é.gif ListSpinnerC32.gif 
MonthSpinnerClé.gif MonthSpinnerC32.gif NumericSpinnerCl6.gif 
NumericSpinnerC32.gif | | 


10 File(s) (2,120 bytes 


Directory of | : | 
D: \Inetpub\wwwroot \Results\classes\symantec\itools\awt\util\_vti_cnf 


bea: [oad | CalendarCi6é.gif 

CalendarC32.gif ProgressBarCl6.gif ProgressBarC32.gif 

StatusScrollerC16.gif StatusScrollerC32.gif ToolBarPanelC1l6.gif 

ToolBarPanelC32.gif ToolBarSpacerCl6.gif ToolBarSpacerC32.gif 
12 File(s) 2,650 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\itools\awt\_vti_cnf 


[.] faded 


BorderPanelCl6.gif BorderPanelC32.gif 
ComboBoxC16.gif ComboBoxC32.gif 
DirectionButtoncl16.gif DirectionButtonC32.gif 
FormattedTextFieldCl6é.gif FormattedTextFieldC32.gif 
HorizontalSliderC16.gif HorizontalSliderC32.gif 
ImageButtonCl6.gif —— ImageButtonC32.gif 
ImageHTMLLinkC16.gif _ ImageHTMLLinkC32.gif 
ImageListBoxC16.gif . ; ImageListBoxC32.gif 
ImagePanelC16.gif ImagePanelC32.gif 
InvisibleButtonCl6.gif InvisibleButtonC32.gif 
InvisibleHTMLLinkCl16.gif InvisibleHTMLLinkC32.gif 
KeyPressManagerPanelCi6.gif KeyPressManagerPanelC32.gif 
Label3DC16.gif Labe13DC32.gif 
LabelButtonclé6é.gif LabelButtonC32.gif 
LabelHTMLLinkC16.gif LabelHTMLLinkC32.gif 
MultiListC16.gif MultiListC32.gif 
RadioButtonGroupPanelC1l6.gif RadioButtonGroupPanelC32.gif 
RollOverButtonCl1l6.gif RollOverButtonC32.gif 
ScrollingPanelC1l6.gif ScrollingPanelC32.gif 
SplitterPanelC16.gif SplitterPanelC32.gif 
StateCheckBoxCi6é.gif | StateCheckBoxC32.gif 
StatusBarCl6.gif StatusBarC32.gif 
TabPanelC16.gif TabPanelC32.gif 
TreeViewC16.gif TreeViewC32.gif 


VerticalSliderClo6.gif VerticalSliderC32.gif 
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. WrappingLabelC16.gif WrappingLabelC32.gif 
54 File(s) 13,782 bytes 


Directory of D: \Inetpub\wwwroot \Results\classes\symantec\itools\beans 


[.] [.-] 


ConnectionDescriptor.class PropertyChangeSupport.class 
SymantecBeanDescriptor.class VetoableChangeSupport.class 
6 File(s) : 9,948 bytes 


Directory of D: \Inetpub\wwwroot \Results\classes\symantec\itools\db 


[.] feed 


fawt ] ConnectionBeanIconColorl6.gif 
ConnectionBeanIconColor32.gif DataSourceIconColorl6.gif 
DataSourcelIconColor32.gif MediatorDSIconColorl6.gif 
MediatorDSIconColor32.gif MediatorIconColorl6.gif 
MediatoriIconColor32.gif { vti_cnf] 

12 File(s) 4, 624 bytes 


Directory of D: \Inetpub\wwwroot \Results\classes\symantec\itools\db\awt 


[.] bee 


ComboBoxC1l6.gif ComboBoxC32.gif 
DBTstampCl6.gif | DBTstampC32.gif 
FormattedTextFieldCl6.gif FormattedTextFieldC32.gif 
NervousTextCl6.gif | NervousTextC32.gif 
StateCheckBoxC16.gif | StateCheckBoxC32.gif 
[ vti_cnf] 

13 File(s) ; 2,185 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\symantec\itools\db\awt\_vti_cnf 


[.] bs] 


ComboBoxCl16. gif ComboBoxC32.gif 
DBTstampC16.gif DBTstampC32.gif 
FormattedTextFieldci6.gif FormattedTextFieldC32. git 
NervousTextC16.gif NervousTextC32.gif 
StateCheckBoxCl6.gif » StateCheckBoxC32.gif 

12 File(s) | 2,650 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\itools\db\_vti_cnf 


[.] [..] 


ConnectionBeanIconColorl6é.gif ConnectionBeanIconColor32.gif 


DataSourcelIconColorl16.gif DataSourcelIconColor32.gif 

MediatorDSIconColorl6.gif MediatorDSIconColor32.gif 

MediatorIconColorl6.gif MediatorIconColor32.gif 
10 File(s) 2,120 bytes 


Directory of’D:\Inetpub\wwwroot \Results\classes\symantec\itools\demo 


[.]. lee . Demo.class DemoFrame.class 
4 File(s) 5,268 bytes | | : | 


Directory of D:\Inetpub\wwwroot \Results\classes\symantec\itools\lang 
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{.] ere 
4 File(s) 


Context.class 





OS.class 
3,962 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\itools\multimedia 


Ps) 
Animator.class 
AnimatorCl6.gif 
AnimatorImage.class 
FireworkBeanInfo.class 
FireworkC32.gif 
ImageViewerBeanInfo.class 
ImageViewerC32.gif 
MovingAnimationBeanInfo.class 
MovingAnimationC32.gif 
NervousTextBeanInfo.class 
NervousTextC32.gif 
PlasmaBeanInfo.class 
PlasmaC32.gif 
ScrollingText$Mouse.class 
ScrollingText.class 
ScrollingTextC16.gif 
SlideShow.class © | 
SoundPlayerBeaninfo.class 
SoundPlayerC32.gif 
SoundViewerThread.class 
42 File(s) 


Directory of 


[-.] 
AnimatorBeanInfo.class 
AnimatorC32.gif 
Firework.class 
FireworkC16.gif 
ImageViewer.class 


. ImageViewerCl1l6é.gif 


MovingAnimation.class 
MovingAnimationcl6é.gif 
NervousText.class 
NervousTextCl6.gif 
Plasma.class 

PlasmaC1l6.gif 

Rocket.class 
ScrollingText$MouseMotion.class 
ScrollingTextBeanInfo.class 
ScrollingTextC32.gif 
SoundPlayer.class 
SoundPlayerCl6.gif 
SoundViewerItem.class 

[ Ver ent | 


124,452 bytes 


D: \Inetpub\wwwroot \Results\classes\symantec\itools\multimedia\ vti_cnf 


[-] [..] 


AnimatorCl6.gif 


AnimatorC32.gif FireworkC16.gif FireworkC32.gif 
ImageViewerC16.gif ImageViewerC32.gif MovingAnimationC16.gif 
MovingAnimationC32.gif NervousTextCl6.gif NervousTextC32.gif 
PlasmaCl6.gif PlasmaC32.gif SerollingTextCl6:.9g1£ 
ScrollingTextC32.gif SoundPlayerC16.gif SoundPlayerC32.gif 


18 File(s) 


4,240 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\itools\net 


[.] [-.] 
3 File(s) 


RelativeURL.class 
1,619 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\itools\util 


i] [oad 
Timer.class 
5 File(s) 


GeneralUtils.class 


ZOrderUtils.class 


9,479 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\itools\vcafe 


et : pase 

[beanhelp] | BundlerSAction.class 
BundlerSItem.class Bundler$Key.class 
BundlerSSymText.class BundlerSWindow.class 
Bundler.class BundlerNode.class 
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[commtool] _ 
DependentDialog$KkKey.class 
DependentDialog.class 
ErsatzFile.class 

18 File(s) 





DependentDialog$Action.class 
Dependent Dialog$Window.class 
DependentiItem.class 
InternalMapper.class 


37,755 bytes 


Directory of D: \Inetpub\wwwroot \Results\classes\symantec\itools\vcafe\beanhelp 


[.] 
. BackRunContainer.class 
BackRunMenu.class 
BackrunObjectCreator.class 
[beaninfo] 
ConvertTovPoO$Helper.class 
DoOnBean.class 
ImageData.class | 
JarClassInfo.class 
JarManager.class 
Manifest.class 
Objectinfo.class 
SimpleClassLoader.class 
26 File(s) 


Directory of 


[..] 


BackRunMemberInfo.class 


 BackRunMenuBar.class 
“BackRunParent.class 


ClassiInfo.class 
ConvertTovPO.class 
[editors] 
InputStreamProducer.class 


| Jarinfo.class 


LoadedJar.class 
MessageHeader.class 

Obj InputStreamWithLoader.class 
[simpleresource] 


77,551 bytes 


D: \Inetpub \wwwroot \Results\classes\symantec\itools\vcafe\beanhelp\beaninfo 


[.] 

CanvasBeaninfo.class 

ContainerBeanInfo.class 

TextComponentBeanInfo.class 
| 8 File(s) 


Directory of 


[ies 


ComponentBeanInfo.class 
PanelBeanInfo.class’ 
TextFieldBeanInfo.class 


| 


24,595 bytes 


D: \Inetpub\wwwroot \Results\classes\symantec\itools\vcafe\beanhelp\editors 


[.] 
BooleanEditor.class 
CheckboxGroupEditor.class 
CursorEditor.class 
IntegerEditor.class 
RectangleEditor.class 
StringEditor.class © 
URLArrayEditor.class 
UseParentsBackgroundEditor.class 
UseParentsForegroundEditor.class 
19 File(s) 


Directory of 


spall 

CharacterEditor.class 
ColorEditor.class 
FontEditor.class © 
LayoutManagerEditor.class 
StringArrayEditor.class 
SymPropertyEditorSupport.class 
URLEditor.class 
UseParentsFontEditor.class 


18,547 bytes 


D: \Inetpub\wwwroot \Results\classes\symantec\itools\vcafe\beanhelp\simpleresource 


[ed 
Handler.class 
4 File(s) 


[-.] 
SimpleResourceConnection.class 
3,042 bytes 


Directory of D: \Inetpub\wwwroot \Results\classes\symantec\itools\vcafe\commtool 


[.] [.-] 
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Memory.class MeterToolSi.class 
MeterTool$SymItem.class MeterToolSSymWindow.class 
MeterTool.class 

7 File(s) 7,771 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\tools 


{.] ee [debug] [java] [javac] [ttydebug] 
6 File(s) O bytes 


Directory of D: \Inetpub\wwwroot \Results\classes\symantec\tools\debug 


Le] 

[-.] 

Agent.class 
AgentConstants.class 
AgentiIn.class 
AgentOutputStream.class 
BreakpointHandler.class 
BreakpointQueue.class 
BreakpointSet.class> 
DebuggerCallback.class 
EmptyApp.class 
ExecReRouter.class 
ExpressionOutOfContextException.class 
ExpressionWrongNumberLocalVarsException.class 
Field.class i 
InvalidPCException.class 
LineNumber.class 
LocalComminputStream.class 
LocalCommOutputStream.class 
LocalCommStream.class 
LocalVariable.class 
MainThread.class 
NoSessionException.class 
NoSuchFieldException.class 
NoSuchLineNumberException.class 
RemoteAgent.class | 
RemoteArray.class 
RemoteBoolean.class 
RemoteByte.class 
RemoteChar.class 
RemoteClass.class 
RemoteDebugger.class 
RemoteDouble.class 
RemoteField.class 
RemoteFloat.class 

- RemoteInt.class 
RemoteLong.class 
RemoteObject.class 
RemoteShort.class 
RemoteStackFrame.class 
RemoteStackVariable.class 
RemoteString.class 
RemoteThread.class 
RemoteThreadGroup.class 
RemoteValue.class 


275 





ResponseStream.class 
StackFrame.class 
SymDbgExec.class 
SymDbgExprFindContext.class 
SymDbgExprHandler.class 

- SymDbgExprResult.class 
SymDbgLoadExpr.class 
SymDbgNotify.class 
-SymDbgProcess.class 


ThreadList.class 
55 File(s) 136,888 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\symantec\tools\java 


(.] “dt 


VEDbgJavaDataRec.class VEDbgJavaDebug.class 
VEDbgJavaintf.class | VEDbgJavakernel.class 
VEDbgJavaMsgRouter.class VEDbgJavaRemoteApp.class 
VEDbgJavaResource.class VEDbgJavaResource ja.class 
VEDbgJavaRuntimeCmd.class 

11 File(s) : 39,759 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\symantec\tools\javac | 


fo] (eee BatchEnvironment.class 
BatchParser.class . ExrorConsumer.class ErrorMessage.class 
JavaIDDE.class Main.class : 

| 8 File(s) 33,103 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\symantec\tools\ttydebug 


[.] Pl . TTY.class 
3 File(s) 3 28,429 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\weblogic 


Foal 7% lisse [jdbc] 
3 File(s) 0 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\weblogic\jdbc 


] [common 4 ] [microsoft4] [sybase4] 


[.] [.. 
5 File(s) | O bytes 


Directory of D: \Inetpub \wwwroot \Results\classes\weblogic\jdbc\common4 


‘2 Pid [compression] [cryptography] [io] 
[net ] [sql] futil] | 
8 File(s) O bytes 


Directory of | : 
D: \Inetpub\wwwroot \Results\classes\weblogic\jdbc\common4\compression 


Pes eon Compressor.class 


LzssCompressor.class LzssNode.class TdsCompressor.class 
6 File(s) = 3,880 bytes 7 
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Directory of 
D: \ Inet pub \wwwroot \Results\classes\weblogic\jdbc\common4\cryptography 


[.] [..] 

BlowfishCryptographer.class Cryptographer.class 

DESCryptographer. class XorCryptographer.class 
6 File(s) © 38,039 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\weblogic\jdbc\common4\io 


[.] oad 


AsciilInputStream.class BufferedFilterInputStream.class 
BufferedFilterOutputStream.class CompressedInputStream.class 
CompressedOutputStream.class EncryptedInputStream.class 
EncryptedOutputStream.class HexInputStream.class 
UnicodeInputStream. class 

11 File(s) 10,326 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\weblogic\jdbc\common4\net 
= , fas] - SocketExtras.class 
SocketTimeout.class 

4 File(s) 4,352 bytes. 
Directory of D: \Inetpub\wwwroot \Results\classes\weblogic\jdbc\common4\sql 


[.] | [ec] 


AsyncWriter. class 7 BaseConnection.class 

- BaseHandler.class BaseString.class 
ConnectDriver.class Connectioninfo.class 
JdbcExpandedSqlParser.class MicrosoftConnection.class 
MicrosoftDatabaseMetaData.¢lass MicrosoftLoginStatement.class 
TdsCallableStatement.class TdsColumnMetaData.class 
TdsConnection.class | TdsDatabaseMetaData.class 
TdsEntry.class TdsException.class 
TdsInputStream.class | TdsLoginStatement.class 
TdsOutputStream.class an TdsParameter.class 
TdsPreparedinputStream.class - TdsPreparedStatement.class 
TdsResultSet.class TdsResultSetMetaData.class 
TdsStatement.class 

27 File(s) - 142,174 bytes 


Directory of D:\Inetpub\wwwroot\Results\classes\weblogic\jdbc\common4\util 
| 


[.] | Eresec | BitsArray.class Day.class 
4 File(s) 2,822 bytes 
Directory of D:\Inetpub\wwwroot \Results\classes\weblogic\jdbc\microsoft4 


a Estee] Driver.class 
: 3 File(s) 859 bytes 


Directory of D:\Inetpub\wwwroot \Results\classes\weblogic\jdbc\sybase4 


ey [eet Driver.class 
3 File(s) | 841 bytes 


a 





Directory 


[.] 


Directory 


[.] 


Directory 


[.] 


[sounds ] 
Directory 
[.] 


DESERT .GIF 
RADAR.GIF 


Directory 


L.] 


DESERT .GIF. 


Directory 


[.] 


[ vti_cnf] 


Directory 


[.] 


Directory 
[.] 
SAWYER.MID 


Directory 


[.] 


Directory 


[.] 
[DOC] 
[SRC] 





of D:\Inetpub\wwwroot\Results\images 
ee help.gif 
3 File(s) 276 bytes 


of D:\Inetpub\wwwroot\Results\_vti_cnf 


Fu ey Results.html 


3 File(s) 533 bytes 
of D: \Inetpub\wwwroot \secureSurvey 
Ped | ADOVBS.inc [images] index.asp [javascript] 
~submit.asp submit . BAK : 
9 File(s) 117,259 bytes 
of D:\Inetpub\wwwroot \secureSurvey\images 
or COMPASS.GIF Connie.jpg DENIM. JPG 
FLY.GIF help.gif IND-DECK.GIF © IND-STRN.GIF 
ves -Cnt] | 
12 File(s) 240,069 bytes 
o£ D: \Inetpub\wwwroot \secureSurvey\images\_vti_cnf_ 
eee COMPASS .GIF Connie.jpg DENIM.JPG 
FLY.GIF IND-DECK.GIF IND-STRN.GIF RADAR.GIF 
10 File(s) 2,253 bytes : 
of D:\Inetpub\wwwroot \secureSurvey\javascript 
Lieeed checksurvey.js dlearsurvey.js. 
5 File(s) 9,549 bytes 
of D:\Inetpub\wwwroot\secureSurvey\javascript\_vti_cnf 
fed | checksurvey.js 
3 File(s) 117 bytes 
of D:\Inetpub\wwwroot \secureSurvey\sounds 
eee bluesbro.mid GONNAFLY.MID mission.mid 
viewkill.mid : 
7 File(s) 196,659 bytes 
of D: \Inetpub\wwwroot \security | 
ieee disclaimer.html 
3 File(s) 2,047 bytes 
of D:\Inetpub\wwwroot \servletrunner 
ee BACKUP [BIN] DeIsLl.isu 
[EXAMPLES ] fortune.log [LIB] README 
SURVEY. TAT | 
13,030 bytes 


12 File(s) 
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Directory of D:\Inetpub\wwwroot\servletrunner\BIN . 


[.] 


Directory of D:\Inetpub\wwwroot\servletrunner\DOC 


[.] 


[IMAGES] 


ze 
3 File(s) 41,984 bytes 


¢ 


[--] . 
servlet tutorial.html 


6 File(s) 39,842 bytes 


2a | . servletrunner.exe 


[APIDOC] 
[ vti_cnf] 


Directory of D: \Inetpub\wwwroot \servletrunner\DOC\APIDOC 


[.] 
[.-] 


AllNames.html 
[IMAGES ] 


javax. 
.servliet.http.Cookie.html 


javax 


javax. 
javax. 
javax. 
javax. 
javax. 
javax. 
javax. 
javax. 
javax. 
javax. 


javax. 
javax. 
javax. 
javax. 
javax. 
javax. 
javax. 
javax. 


servlet.GenericServlet.html 


servlet.http.HttpServlet.html 
servlet.http.HttpServletRequest.html 
servlet.http.HttpServletResponse.html 
servlet .http.HttpSession.html 


servlet.http.HttpSessionBindingEvent.html 
servlet. http.HttpSessionBindingListener.html 


servlet.http.HttpSessionContext html 
servlet. http.HttpUtils. html 
servlet.Servlet.html 
servlet.ServletConfig.html 
servlet.ServletContext.html 
servlet.ServletException.html 
servlet.ServletInputStream.html 
servlet.ServletOutputStream.html 
servlet.ServletRequest.html 
servlet.ServletResponse.html 
servlet.SingleThreadModel .html 
servlet.UnavailableException.html 


Package-javax.servlet.html 
Package-javax.servlet.http.html 
packages .html 

tree.html 

[ Vel -eCneE] 


29 File(s) 279,098 bytes 


Directory of D:\Inetpub\wwwroot\servletrunner\DOC\APIDOC\IMAGES 


[.] 


blue-ball.gif 
constructors.gif 
error-index.gif 
green-ball.gif 
magenta-balli-small.gif 
METHODS.GIF : 
red-ball-~small.gif 
variables.gif 


[..] 
class-index.gif 
cyan-ball-small.gif 
exception-index.gif 
interface-index.gif 
magenta-ball.gif 

- OpenBookIcon.gif 
RED-BALL.GIF 


[vis ens] 
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yellow-ball-small.gif 


blue-ball-small.gif 
constructor-index.gif 
cyan-ball.gif . 
green-ball-smalil.gif 
[JAVA.AWT ] | 
method-index.gif 
package-index.gif 
variable-index.gif 
yellow-ball.gif 





28 File(s) 25,671 bytes 
Directory of D:\Inetpub\wwwroot\servletrunner\DOC\APIDOC\IMAGES \JAVA. AWT 


cs] ere GridBagEx.gif LE VELens! 
4 File(s) | 2,453 bytes 


Directory of 7 
D: \Inetpub\wwwroot \servletrunner\DOC\APIDOC\IMAGES\JAVA.AWT\_vti_cnf 


Psy feces GridBagEx.gif 
3 File(s) 266 bytes 


“Directory of D:\Inetpub\wwwroot \servletrunner\DOC\APIDOC\IMAGES\_vti_cnf 


is] [..] - blue~ball-small.gif 
blue-ball.gif class-index.gif constructor-index.gif. 
constructors.gif cyan-ball-small.gif cyan-ball.gif 
error~index.gif exception-index.gif green-ball-small.gif 
green-ball.gif interface-index.gif magenta-ball-small.gif 
magenta-ball.gif method-index.gif . METHODS.GIF 
OpenBookIcon.gif package-index.gif red-ball-small.gif 
RED-BALL.GIF | variable-index.gif variables.gif 
yellow-ball-small.gif yellow-ball.gif | 

26 File(s) 14,099 bytes 


Directory of D:\Inetpub\wwwroot\servletrunner\DOC\APIDOC\_vti_cnf 


[-] 
[-.] 
AllNames.html 
javax.servlet.GenericServlet.html 
javax.servlet.http.Cookie.html 
javax.servlet.http.HttpServlet.html 
javax.servlet.http.HttpServletRequest.html 
javax.servlet.http.HttpServletResponse.html 
javax.servlet .http.HttpSession.html 
javax.servlet .http.HttpSessionBindingEvent.html 
. Javax.servlet.http.HttpSessionBindingListener.html 
javax.servlet .http.HttpSessionContext.html 
javax.servlet .http.HttpUtils.html 
javax.servlet.Serviet.html 
javax.servlet.ServietConfig.html 
javax.servlet.ServletContext.html 
javax.servlet.ServletException-html 
javax.servlet.ServletInputStream.html 
javax.servlet.ServletOutputStream.html 
javax.servlet.ServletRequest.html 
javax.servlet.ServletResponse.html 
javax.servlet.SingleThreadModel.html 
javax.servlet.UnavailableException.html 
Package-javax.servlet.html 
Package-javax.servlet.http.html 
packages.html 
tree. html | | 
i. 27 File(s) 72,291 bytes 
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Directory of D:\Inetpub\wwwroot\servletrunner\DOC\IMAGES 

bed [eies! BANNER.GIF survey~reply.gif 
[ vti_cnf] ; 
5 File(s) 10,355 bytes 

Directory of D:\Inetpub\wwwroot\servletrunner\DOC\IMAGES\_vti_cnf_ 


[2] | - ex] BANNER. GIF survey-reply.gif 
4 File(s) 654 bytes 


Directory of D:\Inetpub\wwwroot\servletrunner\DOC\_vti_cnf 


[.] [..] | servlet _tutorial.html 
3 File(s) 2,397 bytes 


Directory of D:\Inetpub\wwwroot\servletrunner\EXAMPLES 


> en ee | JdcSurvey.html 
SessionServlet.class SessionServlet.java SimpleServlet.class 
SimpleServlet.java SnoopServlet.class SnoopServlet.java 
[ vti_cnf] P 
10 File(s) —~6©20,066 bytes | 


Directory of D:\Inetpub\wwwroot\servletrunner\EXAMPLES\ vti_cnf 


Fa | ae es JdcSurvey.html 
3 File(s) | 430 bytes 


Directory of D:\Inetpub\wwwroot\servlietrunner\LIB 


[.] Puc] JSDK.JAR 
| 3 File(s) | 75,743 bytes 


Directory of D:\Inetpub\wwwroot \servletrunner\SRC 


[-] [..] [JAVAX] | 
| 3 File(s) O bytes 


Directory of D:\Inetpub\wwwroot\servletrunner\SRC\JAVAX 


[.] Bee [SERVLET] 
3 File(s) 0 bytes 


Directory of D:\Inetpub\wwwroot\servletrunner\SRC\JAVAX\SERVLET 


; / 
/ 


[.] : [..] 


GenericServlet.java [HTTP] 

Servlet.java ServletConfig.java 

ServletContext.java | ServletException.java 

ServletInputStream.java ServletOutputStream.java 

ServletRequest.java ServletResponse.java 

SingleThreadModel.java UnavailableException.java 
14 File(s) 55,979 bytes 


Directory of D:\Inetpub\wwwroot\servletrunner\SRC\JAVAX\SERVLET\HTTP 
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[.] 

Cookie’.java 
HttpServletRequest.java 
HttpSession.java 


HttpSessionBindingListener.java 


HttpUtils.java 
11 File(s) 





[..] 

HttpServlet.java 
HttpServletResponse.java 
HttpSessionBindingEvent.java 
HttpSessionContext.java 


85,816 bytes 


Directory of D:\Inetpub\wwwroot\SERVLETS 


[.] 
AllNames.html 
[file utilities] 


FortuneClientServilet.class | 


FortuneClientServlet.java 
fortunes.mdb 
FortuneServer.html 
[images] 
QuoteSearch.class 
QuoteSearch.java 
RequestProcessor. html 
servlet.properties 
SURVEY . TXT 
SurveyServlet.java 
[WEBLOGIC] 
WriteToFile.html 

32 File(s) 


[-.] 
[CONNECT] 


- FORTUNE. LOG 


FortuneClientServlet.html 
fortunes.ldb 


_FortuneServer.class > 
- FortuneServer.java - 


packages.html 
QuoteSearch.html 
RequestProcessor.class 
RequestProcessor. java 
startserver.bat 
SurveyServlet.class 
tree.html _ 


“WriteToFile.class 


WriteToFile.java 
3,042,391 bytes 


Directory of D:\Inetpub\wwwroot \SERVLETS\CONNECT 


[.] [..] . 
5 File(s) 


[LICENSE] 


fmicrosoft] [SYBASE] 


O bytes 


Directory of D: \Inetpub\wwwroot \SERVLETS \CONNECT \LICENSE 


[-] | [.. 


LicenseManager.class 


LicenseException.class 
6 File(s) 


License.class 
LicenseRecord.class 


5,890 bytes © , 


Directory of D:\Inetpub\wwwroot \SERVLETS\CONNECT\microsoft 


[.] ee 


3 File(s) 


Directory of D:\Inetpub\wwwroot \SERVLETS\CONNECT\SYBASE 


[.] ] 


(eee 
3 File(s) 


MicrosoftDriver.class 
175 bytes 


\ 


SybaseDriver.class 
166 bytes 


Directory of D:\Inetpub\wwwroot\SERVLETS\file utilities 


[.] bas 
WriteToFile.java 
6 File(s) 


WriteToFile.~jav 


WriteToFile.BAK WriteToFile.class 


8,151 bytes 


Directory of D:\Inetpub\wwwroot\SERVLETS\images 
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Ea (as) blue-ball-small.gif 


blue-ball.gif constructor-index.gif | constructors.gif 

green-ball-small.gif green-ball.gif magenta-ball.gif 

method-index.gif methods.gif _ red-ball-small.gif 

red-ball.gif speaking.gif variable-index.gif 

variables.gif -yellow-ball-small.gif yellow-ball.gif 
218 File(s) 14,696 bytes 


Directory of D:\Inetpub\wwwroot \SERVLETS\WEBLOGIC 


[.] [eed [JDBC] 
3 File(s) 0 bytes 


Directory of D:\Inetpub\wwwroot \SERVLETS\WEBLOGIC\JDBC 


[.] ea [COMMON4 ] Imicrosoft4] [SYBASE4] 
5 File(s) 0 bytes 


Directory of D:\Inetpub\wwwroot \SERVLETS\WEBLOGIC\JDBC\COMMON4 


fie [..] | [compression] [cryptography] [10] 
[NET] [SOL] {[UTIL] 
8 File(s) | 0 bytes 


Directory of D: \Inetpub \wwwroot \SERVLETS \WEBLOGIC\JDBC\COMMON4 \compression 


[ m] Ce] Compressor.class 


LzssCompressor.class LzssNode.class _ TdsCompressor.class 
6 File(s) 3,880 bytes 


Directory of D: \Inetpub\wwwroot \SERVLETS \WEBLOGIC\ JDBC\COMMON4 \cryptography 


aot 3 an | 

BlowfishCryptographer.class Cryptographer.class 

DESCryptographer.class XorCryptographer.class 
6 File(s) 38,039 bytes | 


Directory of D:\Inetpub\wwwroot \SERVLETS\WEBLOGIC\JDBC\COMMON4\IO 


[.] . Dare | 


AsciiInputStream.class BufferedFilterInputStream.class 
Buf feredFilterOutputStream.class CompressedinputStream.class 


CompressedOutputStream.class EncryptedInputStream.class 
EncryptedOutputStream.class HexInputStream.class 
UnicodeInputStream.class 

li File(s) 10,326 bytes 


Directory of D:\Inetpub\wwwroot \SERVLETS\WEBLOGIC\JDBC\COMMON4 \NET 


era SocketExtras.class 


[.] 
SocketTimeout.class 
4 File(s) 4,352 bytes 


Directory of D: \Inetpub\wwwroot \SERVLETS \WEBLOGIC\JDBC\COMMON4 \SQL 


[.] | . [..] 


AsyncWriter.class BaseConnection.class 
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BaseHandler.class 
ConnectDriver.class 
JdbcExpandedSqlParser.class 
MicrosoftDatabaseMetaData.class 
TdsCallableStatement.class 
TdsConnection.class 
TdsEntry.class 
TdsiInputStream.class 
TdsOutputStream.class 
TdsPreparediInputStream.class 


TdsResultSet.class » 
TdsStatement.class 
_ 27 File(s) 





BaseString.class 
ConnectionInfo.class 
MicrosoftConnection.class 
MicrosoftLoginStatement.class 
TdsColumnMetaData.class 
TdsDatabaseMetaData.class 
TdsException.class 
TdsLoginStatement.class 
TdsParameter.class 
TdsPreparedStatement.class 
TdsResultSetMetaData.class 


142,174 bytes 


Directory of D:\Inetpub\wwwroot \SERVLETS \WEBLOGIC\JDBC\COMMON4 \UTIL 


[..] 
4 File(s) 


[we] 


Directory 


[.] Fees 
3 File(s) 


Directory 


[.] . [..] 


BitsArray.class Day.class. 


2,822 bytes 


of D:\Inetpub\wwwroot \SERVLETS\WEBLOGIC\JDBC\microsoft4 


] Driver.class 


859 bytes 


of D:\Inetpub \wwwroot \SERVLETS\WEBLOGIC\JDBC\SYBASE4 


Driver.class 


3 File(s) 841 bytes 
Directory of D:\Inetpub\wwwroot\sounds 
[.] a bluesbro.mid GONNAFLY.MID mission.mid 
SAWYER.MID viewkill.mid 
7 File(s) 196,659 bytes 
Directory of D:\Inetpub\wwwroot \Survey 
Ped [eset Applet.html [classes] [images] 
[javascript] [sounds] Survey.html [_vti_cnf] 
9 File(s) | 97,431 bytes 


Directory of D: \Inetpub\wwwroot \Survey\classes 


[.] 
AboutDialog$SymAction.class 
AboutDialog.class 
AppletiSSymMouse.class 
OQuestionnaire$SSymAction.class 
QuestionnaireSSymWindow.class 
Questionnaire.java 
QuitDialog$SSymWindow.class 
QuitDialog.java 
Survey.class 

[symantec], 
UserInput$SymWindow.class 
UserInput.java 

26 File(s) 


[..] 3 : 
AboutDialog$SymWindow.class 
AboutDialog.java 

[connect] 
QuestionnaireSSymMouse.class 
Questionnaire.class 
QuitDialog$SSymAction.class 
QuitDialog.class 
Survey$SymMouse.class 
Survey.java 
UserInput$SymMouse.class 
UserInput.class | 
fweblogic] 

126,073 bytes 
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Directory of D: \Inetpub\wwwroot \Survey\classes\connect 


C4 een [license] [microsoft] [sybase] 
5 File(s) O bytes | 


Directory of D:\Inetpub\wwwroot \Survey\classes\connect\license 


[.] Pesce License.class | 
LicenseException.class LicenseManager.class LicenseRecord.class 
6 File(s) 5,890 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\connect\microsoft 


[.] | ‘eee MicrosoftDriver.class 
3 File(s) 175 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\connect\sybase 


[.] | em | SybaseDriver.class 
3 File(s 166 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\symantec . 


oa [..] [beans] [dtd] [itools] [tools] 
6 File(s) O bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\beans 


ie eel Beans.class 
3 File(s) 734 bytes 


Directory of D: \Inetpub\wwwroot \Survey\classes\symantec\dti_ 


[.] 

[.-] 

BogusComponent.class 
ComboBoxDesignTimelInterface.class 
ControlDesignTimetInterface.class 
CustomPropEditFrame.class 
DefaultAwtComponentDesignTimeInterface.class 
DefaultAwtPanelDesignTimeInterface.class 
EventiInfo.class 

Event Paraminfo.class 
JBlenderFrame.class 
JBlenderFrameCreateParams.class 
JBlenderMain.class 
JBlenderPanel.class 

. JBlenderPanelGridiInfo.class 
JBlenderReqQueue.class 
JBlenderRequest.class 
JClassLoader.class 
JCustomPropFrame.class 
JDebugStr.class 
JIinvokeThread.class 

NewFont.class 

PropInfo.class 
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PropInfoBoolean.class 
PropinfoCharacter.class 
PropiInfoColor.class 
PropInfoCustom.class 
PropinfoDouble.class 
PropInfoDynamic.class 
PropInfoEnum.class 

PropinfoFont.class 

PropiInfoInteger.class 
PropInfoInterface.class 
PropInfoString.class 
PropInfoStringArray.class 
PropInfoURL.class 

PropMethod.class 

Queue.class 

Scrol lingNames$JPActionHandler. class 
ScrollingNames$SymComponent.class 
ScrollingNames.class 
ScrollingPanelDesignTimeInterface. eiaes 
SlideShowDesignTimeInterface.class 
StarMain$SymWindow.class 

StarMain.class 

stars.gif 
StdAwtButtonDesignTimeInterface.class 
StdAwtCheckboxDesignTimeInterface.class 
StdAwtChoiceDesignTimeInterface.class 
StdAwtLabelDesignTimeInterface.class 
StdAwtScrollbarDesignTimeInterface.class 
StdAwtTextAreaDesignTimeInterface.class 
StdAwtTextComponentDesignTimeInterface.class 
StdAwtTextFieldDesignTimeInterface.class 
symName.class 
TabPanelDesignTimeInterface.class 
TestFrame.class 
TreeViewDesignTimeInterface.class 
VCFormCompListener$AddRemoveListener. class 
VCFormCompListenerSItem.class 
VCFormCompListener.class | 
WrappingLabelDesignTimeInterface.class 

[ vti_cnf] 
63 File(s) 111,563 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\dti\_vti_cnf 


ee eat stars.gif 
3 File(s) 265 bytes 


Directory of D: \Inetpub\wwwroot \Survey\classes\symantec\itools 


fs] [..] fawt] [beans] ~ [db] [demo] 
{lang] [multimedia] [net] [util] [vcafe] 


1i File(s) 0 bytes 


Directory of D: \Inet pub \wwwroot \Survey\classes\symantec\itools\awt 


[-] [..] 
AlignStyle.class BaseTabbedPanelSAction.tlass 
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BaseTabbedPanelSMouse.class 
-BaseTabbedPanelBeanInfo.class 
BorderPanel$Veto.class 
BorderPanelBeaniInfo.class 
BorderPanelC32.gif | 
ButtonBase$BevelVeto.class 
ButtonBaseSFrameVeto.class 
ButtonBaseSMouse.class 
ButtonBaseBeanInfo.class 
ComboBoxS$Focus.class 
ComboBoxSKeyBox.class 
ComboBox$Mouse.class 
ComboBoxBeanInfo.class 
ComboBoxC32.gif 
CompareFunc.class 
DirectionButtonSIndntVeto. Biaes 
DirectionButton.class 
DirectionButtoncl6.gif 
FormattedTextField$Key.class 
FormattedTextFieldBeanInfo.class 
FormattedTextFieldcC32.gif 
HorizontalSlider$SMouseMtn.class 
HorizontalSliderBeaniInfo.class 
HorizontalSliderC32.gif 
HorizontalSliderThumbBot.class 
HorizontalSliderThumbTop.class 
ImageButton$StyleVeto.class 
ImageButtonBeanInfo.class 
ImageButtonC32.gif 
ImageHTMLLinkBeanInfo. class 
ImageHTMLLinkC32.gif 
ImageListBox$SKey.class 
ImageListBox$MouseMotion.class 
ImageListBoxBeanInfo.class 
ImageListBoxC32.gif 
ImagePanelBeaniInfo.class 
ImagePanelC32.gif | 
InvisibleButton$Mouse.class 
InvisibleButtonBeanInfo.class 
InvisibleButtonC32.gif 
InvisibleHTMLLink$Mouse.class 
InvisibleHTMLLinkBeanInfo.class 
InvisibleHTMLLinkC32.gif 
KeyPressManagerPanel$K.class 
KeyPressManagerPanelBeanInfo.class 
KeyPressManagerPanelC32.gif 
Label 3DBeanInfo.class _ 
Label3DC32.gif 
LabelButton$VAVeto.class 
LabelButtonBeanInfo.class 
LabelButtonC32.gif 
LabelHTMLLinkBeanInfo.class 
Label HTMLLinkC32.gif 
Matrix.class 

fmultiList] 
MultiList$Focus.class 
MultiList$Mouse.class 








BaseTabbedPanel.class 
BevelStyle.class 
BorderPanel.class 
BorderPanelC16.gif 
ButtonBaseSAction.class- 
ButtonBase$Focus.class 


- ButtonBaseSKey.class 


ButtonBase.class 
ComboBoxSAction.class 
ComboBoxSItem.class 
ComboBoxS$KeyList.class 
ComboBox.class 
ComboBoxC16.gif 
CompareCells.class 
CompareFuncCB.class 
DirectionButton$SizeVeto.class 
DirectionButtonBeanInfo.class 
DirectionButtonC32.gif 
FormattedTextField.class 
FormattedTextFieldC16.gif 
HorizontalSlider$Mouse.class 
HorizontalSlider.class 
HorizontalSliderCl6.gif 
HorizontalSliderThumb.class 
HorizontalSliderThumbBoth.class 
[image] 

ImageButton.class 
ImageButtoncl16.gif 
ImageHTMLLink.class 
ImageHTMLLinkC16.gif 


ImageListBoxS$Adjustment.class 


ImageListBox$Mouse.class 
ImageListBox.class 
ImageListBoxC16.gif 
ImagePanel.class 
ImagePanelC16.gif 
InvalidTreeNodeException. class 
InvisibleButton.class 
InvisibleButtonCl16.gif 
InvisibleHTMLLinkSAction.class 
InvisibleHTMLLink.class 
InvisibleHTMLLinkC16.gif 
KeyPressManagerPanelSA.class 
KeyPressManagerPanel.class 
KeyPressManagerPanelCl6.gif 
Labe1l3D.class | 
Labe1l3DC16.gif | 
LabelButton$HAVeto.class 
LabelButton.class | 
LabelButtonC16.gif 
LabelHTMLLink.class 
LabelHTMLLinkC16.gif 
ListIitem.class | 
MatrixEnumeration.class 
MultiListSAdjustment.class 
MultiList$Key.class 
MultiList$MouseMotion.class 
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MultiList.class 
MultiListCl6.gif 
Orientation.class 
RadioButtonGroupPanelBeanInfo.class 
RadioButtonGroupPanelC32.gif 
RollOverButton$SMouseMtn.class 
RollOverButtonBeaninfo.class 
RollOverButtonC32.gif 
ScrollingPanelBeanInfo.class 
ScrollingPanelC32.gif 
Slider.class 
SliderTick.class 
SplitterPanel$SMouseMtn.class 
SplitterPanel.class 
SplitterPanelC1l6.gif 
StateCheckBoxSMouse.class 
StateCheckBoxBeanInfo.class 
StateCheckBoxC32.gif 
StatusBarBeaniInfo.class 
StatusBarC32.gif 
TabPanel.class 
TabPanelC16.gif 
TransparencyTrick.class 
TreeNode.class 
TreeViewSFocus.class 
TreeViewSMouse.class 
TreeViewBeanInfo.class 
TreeViewC32.gif 
VerticalSlider$SMouse.class 
VerticalSlider.class 
VerticalSliderC16.gif 
VerticalSliderThumb.class 
VerticalSliderThumbLeft.class 
WrappingLabel.class 
WrappingLabelCl6.gif 
[ :Ve1-cnt) 

189 File(s) 





MulitiListBeaniInfo.class 
MultiListC32.gif 


RadioButtonGroupPanel.class 


RadioButtonGroupPanelCl6.gif 
RollOverButton$Mouse.class 
RollOverButton.class 
RollOverButtonCl6é.gif 
ScrollingPanel.class 
ScrollingPanelCl6.gif 

[shape] . | 
SliderBeanInfo.class 
SplitterPanel$SMouse.class 
SplitterPanel$STVeto.class 
SplitterPanelBeanInfo.class 
SplitterPanelC32.gif 
StateCheckBox.class 
StateCheckBoxCl6.gif 
StatusBar.class 
StatusBarCl6.gif | 
TabPanelSPropertyChange.class 
TabPanelBeaniInfo.class 
TabPanelC32.gif 
TransparencyTrickUtils.class 
TreeViewSAdjustment.class 
TreeViewSKey.class 
TreeView.class 
TreeViewC16.gif 

futil] 
VerticalSliderSMouseMtn.class 
VerticalSliderBeanInfo.class 
VerticalSliderC32:gqif 
VerticalSliderThumbBoth.class 
VerticalSliderThumbRight.class 
WrappingLabelBeanInfo.class 
WrappingLabelC32.gif 


652,892 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\awt\image 


[.] : [evel 
FadeFilter.class 
5 Fite (Ss) 


DarkenFilter.class 


LightenFilter.class 
7,631 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\awt\multilList 


[.] : [. 
Cell.class 
TextAndImageCell.class 

5 File(s) 


CompareTextAndImageCells.class 


4,490 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\awt\shape 


[.] [..] 
-Circle.class a 

CircleCl6.gif 
Ellipse.class 


CircleBeanIinfo.class 
CircleC32.gif 
EllipseBeanInfo.class 
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EllipseClé.gif 
HorizontalLine.class 
HorizontalLineCl6.gif 
Line.class 
LineCl6.gif 
Rect.class 
RectCl6.gif 
Shape.class 
Square.class 
SquareCl6.gif 
VerticalLine.class 
. VerticalLineCl6.gif 
{VEL cnt] 

33 File(s) 


Directory of. 





EllipseC32.gif 
HorizontalLineBeanInfo.class 
HorizontalLineC32.gif 
LineBeanInfo.class 

HineCsZ gif. * 
RectBeanInfo.class 
RectC32.gif 
ShapeBeanInfo.class . 
SquareBeanInfo.class 
SquareC32.gif 
VerticalLineBeanInfo.class 
VerticalLineC32.gif 


47,004 bytes 


OD: \Inetpub\wwwroot \Survey\classes\symantec\itools\awt\shape\_ vti_cnf 


[.] [..] 
Circlecs2.. gif 
HorizontalLineCl6é.gif 
LineC32.gif 
SquareC16.gif 
VerticalLineC32.gif 

16 File(s) 


EllipseCli6.gif 
HorizontalLineC32.gif 
RectCl1lé.gif 
SquareC32.gif 


CircleCié.dit 
EllipseC32.gif 
LineC16.gif | 
RectC32.gif 
VerticalLineC1l6.gif 


3,710 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\awt\util 


[.] 
Ga endaeeneti on: class 
Calendar.class 
CalendarCl6.gif 
ColorUtils.class 
[edit] : 
ProgressBarBeaniInfo.class 
ProgressBarC32.gif 
StatusScroller.class © 
StatusScrollerCl6.gif 
ToolBarPanel$Veto.class 
ToolBarPanelBeanInfo.class 
ToolBarPanelC32.gif 
ToolBarSpacer.class 
ToolBarSpacerCl6.gif 
Util.class 

32 File(s). 


Pes] 
Calendar$Mouse.class 
CalendarBeanInfo.class 
CalendarC32.gif 
[dialog] 
ProgressBar.class 
ProgressBarC16.gif 
[spinner] 
StatusScrollerBeanInfo.class 
StatusScrollerC32.gif 
ToolBarPanel.class 
ToolBarPanelC16.gif 
ToolBarSpacerSVeto.class 
ToolBarSpacerBeanInfo.class 
ToolBarSpacerC32.gif 
{[ vti_cnf] 

93,195 bytes 


Directory of D: \Inet pub \wwwroot \Survey\classes\symantec\itools\awt\util\dialog 


[.] [asd 
4 File(s) 


DialogBox.class ModalDialog.class 


2,449 bytes 


Directory of D: \Inetpub\wwwroot \Survey\classes\symantec\itools\awt\util\edit 


[.] 


AddressCode.class 


IntlLongDistPhoneNumber.class 
IntlLongDistPhoneNumberCl16.gif 


[..] 

AddressCodeBeanInfo.class 

Int 1LongDistPhoneNumberBeanInfo. class 
IntlLongDistPhoneNumberC32.gif 
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LocalPhoneNumber.class 
LocalPhoneNumberC16.gif 
LongDistPhoneNumber.class 
LongZipCode.class 
LongZipCodeCl6.gif 
PhoneNumber.class 
PostalCode.class 
PostalCodeC16.gif 
SocialIDNumber.class 
SocialInsuranceNumber.class 
SocialInsuranceNumberCl6.gif 
SocialSecurityNumber.class 
SocialSecurityNumberCl6.gif 
USLongDistPhoneNumber.class 
USLongDist PhoneNumberC16.gif 
ZipCode.class 
ZipCodeC16.gif 
| vei sent)’ 

43 File(s) 


Directory of 


LocalPhoneNumberBeanInfo.class | 
LocalPhoneNumberC32.gif 
LongDistPhoneNumberBeanInfo.class 
LongZipCodeBeanInfo.class | 
LongZipCodeC32.gif 
PhoneNumberBeaninfo.class 
PostalCodeBeanInfo.class 
PostalCodeC32.gif 
SocialIDNumberBeaniInfo.class 
SocialInsuranceNumberBeanInfo.class 
SocialInsuranceNumberC32.gif 
SocialSecurityNumberBeanInfo.class 
SocialSecurityNumberC32.gif 
USLongDist PhoneNumberBeanInfo.class 
USLongDistPhoneNumberC32.gif 
ZipCodeBeaninfo.class 
ZipCodeC32.gif 


44,980 bytes 


D: \Inetpub\wwwroot \Survey\classes\symantec\itools\awt\util\edit\_vti_cnf 


[.] [..] 
Int 1LongDistPhoneNumberc16é. gif IntlLongDistPhoneNumberC32.gif 
LocalPhoneNumberC16.gif LocalPhoneNumberC32.gif 
LongZipCodeC1l6.gif LongZipCodeC32.gif 
PostalCodeC1lé.gif PostalCodeC32.gif 
SocialInsuranceNumberCl6.gif SocialInsuranceNumberC32. gif 
SocialSecurityNumberCl6.gif SocialSecurityNumberC32.gif 
USLongDistPhoneNumberClo. a USLongDistPhoneNumberC32.gif 
ZipCodeC16.gif ZipCodeC32.gif 

18 File(s) 4,240 bytes 


Directory of D: \Inetpub\wwwroot \Survey\classes\symantec\itools\awt\util\spinner 


[.] [..] 
DaySpinner. class DaySpinnerBeanInfo.class 
DaySpinnerC16.gif DaySpinnerC32.gif 
HorizontalSpinButtonPanel.class ListSpinner.class 
ListSpinnerBeanInfo.class ListSpinnerCl6.gif 
ListSpinnerC32.gif MonthSpinner.class 
MonthSpinnerBeanInfo.class MonthSpinnerCl6.gif 
MonthSpinnerC32.gif NumericSpinner.class 
NumericSpinnerBeanInfo.class NumericSpinnerC16.gif 
NumericSpinnerC32.gif SpinButtonPanelSAction.class 
SpinButtonPanel.class SpinnerSAction.class 
SpinnerSCurrentVeto.class SpinnerSMaxVeto.class 
\Spinner$SMinVeto.class Spinner.class 
SpinnerBeanIinfo.class VerticalSpinButtonPanel. class 
[ vti_cnf] 

| 29 File(s) 74,491 bytes 
Directory of 
D: inet pan Wiooe \Gdevey Giaeses eamantec Ueno s enc eit \epimner\. VoL Cne 


[.J ° Lead DaySpinnerC16.gif 
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DaySpinnerC32.gif ListSpinnerC16.gif ListSpinnerC32.gif 


MonthSpinnerC16.gif MonthSpinnerC32.gif NumericSpinnerCl6.gif 
NumericSpinnerC32.gif 
| 10 File(s) . 2,120 bytes 


Directory of | Yok. o | 
D: \Inetpub\wwwroot \Survey\classes\symantec\itools\awt \util\_vti_cenf 


[.] ere CalendarCl6.gqif 

CalendarC32.gif ProgressBarCloé.gif ProgressBarC32.gif 

StatusScrollerCl6é.gif StatusScrollerC32.gif ToolBarPanelC16.gif 

ToolBarPanelC32.gif ToolBarSpacerCl6.gif . ToolBarSpacerC32.gif 
12 File(s) 2,650 bytes | 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\awt\ vti_cnf 


[.] ad | , 


BorderPanelC16.gif BorderPanelC32.gif 
ComboBoxC16.gif ComboBoxC32.gif 
DirectionButtoncl6.gif DirectionButtonC32.gif 
FormattedTextFieldcl6.gif FormattedTextFieldC32.gif 
HorizontalSliderCl6.gif HorizontalSliderC32.gif 
ImageButtonclé.gif ImageButtonC32.gif 
ImageHTMLLinkCi6.gif -  JImageHTMLLinkC32.gif 
ImageListBoxC1l6.gif ImageListBoxC32.gif 
ImagePanelC16.gif | ImagePanelC32.gif 
InvisibleButtoncl6.gif InvisibleButtonC32.gif 
InvisibleHTMLLinkC16.gif InvisibleHTMLLinkC32.gif 
KeyPressManagerPanelCl1l6.gif KeyPressManagerPanelC32.gif 
Label3DC16.gif Label3DC32.gif 
LabelButtonCl16.gif . LabelButtonC32.gif 
LabelLHTMLLinkC16.gif LabelLHTMLLinkC32.gif 
MultiListCl6.gif MultiListC32.gif 
RadioButtonGroupPanelC16.gif RadioButtonGroupPanelC32.gif 
RollOverButtonC16.gif RollOverButtonC32.gif 
ScrollingPanelCl6é.gif ScrollingPanelC32.gif 
SplitterPanelC1l6.gif | SplitterPanelC32.gif 
StateCheckBoxCl6.gif StateCheckBoxC32.gif 
StatusBarCl6.gif | StatusBarC32.gif 
TabPanelC1l6.gif TabPanelC32.gif 
TreeViewC16.gif 3 TreeViewC32.gif 
VerticalSliderCl6.gif VerticalSliderC32.gif 
WrappingLabelC16.gif WrappingLabelC32.gif 


54 File(s) 13,782 bytes 
Directory of D: \Inetpub\wwwroot \Survey\classes\symantec\itools\beans 


[-] | feed 


ConnectionDescriptor.class PropertyChangeSupport.class 
SymantecBeanDescriptor.class VetoableChangeSupport.class 
6 File(s) — 9,948 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\symantec\itools\db 
eo | een 


[awt] ConnectionBeanIconColorl6.gif | 
ConnectionBeanIconColor32.gif DataSourceIconColorlé.gif 
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DataSourceIconColor32.gif MediatorDSIconColorlé6.gif 


MediatorDSIconColor32.gif MediatorIconColorl6.gif 
MediatorIconColor32.gif P Ved. cnt] 
: 12 File(s) . 4,624 bytes 


Directory of D: \Inetpub\wwwroot \Survey\classes\symantec\itools\db\awt 


[.] fice) 


ComboBoxC16.gif -  ComboBoxC32.gif 
DBTstampC16.gif DBTstampC32.gif 
FormattedTextFieldcl6.gif FormattedTextFieldC32.gif 
NervousTextCl6.gif | | NervousTextC32.gif 
StateCheckBoxC16.gif StateCheckBoxC32.gif 


[ vti_cnf] 
13 File(s) 2,185 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\symantec\itools\db\awt\_vti_cnf 


[2] ) a Poel 


ComboBoxCl6.gif | ComboBoxC32.gif 
DBTstampC1i6.gif DBTstampC32.gif | 
FormattedTextFieldCl6.gif | FormattedTextFieldC32.gif 
NervousTextCl6.gif NervousTextC32.gif 
StateCheckBoxC16.gif StateCheckBoxC32.gif 

12 File(s) 2,650 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\db\_vti_cnf 


[.] [..] 


ConnectionBeanIconColorl6.gif ConnectionBeanIconColor32.gif 


DataSourcelIconColorl16.gif | DataSourcelIconColor32.gif 

MediatorDSIconColorli6.gif MediatorDSIconColor32.gif 

MediatorIconColorl6.gif .. MediatorIconColor32.gif 
10 File(s) 2,120 bytes 


Directory of D: \Inetpub\wwwroot \Survey\classes\symantec\itools\demo 


[.] Peed Demo.class DemoFrame.class 
4 File(s) - 5,268 bytes | 


Directory of D:\Inetpub\wwwroot \Survey\classes\symantec\itools\lang 


[.] eee | Context.class OS.class 
4 File(s) | 3,962 bytes . 


Directory of D: \Inetpub \wwwroot \Survey\classes\symantec\itools\multimedia 


[.] [..] 


Animator.class -  AnimatorBeanInfo.class 


AnimatorCl6.gif © -- AnimatorC32.gif 
AnimatorImage.class Firework.class 
FireworkBeaniInfo.class FireworkCl6.gif 
FireworkC32.gif | ImageViewer.class 
ImageViewerBeanInfo.class ImageViewerC16é.gif 
ImageViewerC32.gif MovingAnimation.class 
MovingAnimationBeanInfo.class MovingAnimationCl6.gif 
MovingAnimationC32.gif | NervousText.class ) 
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NervousTextBeaninfo.class 
NervousTextC32.gif 
PlasmaBeanInfo.class 
PlasmaC32.gif 
ScrollingText$Mouse.class 
ScrollingText.class 
ScrollingTextC16.gif 
SlideShow.class 


SoundPlayerBeanInfo.class © 


SoundPlayerC32.gif 
SoundViewerThread.class 








NervousTextCl6.gif 
Plasma.class 

PlasmaClé.gif 

Rocket.class 
ScrollingTextSMouseMotion.class 
ScrollingTextBeanInfo.class 
ScrollingTextC32.gif 
SoundPlayer.class 
SoundPlayerCl6.gif 
SoundViewerItem.class 

[ vti_cnf] 


42 File(s) 124,452 bytes 
Directory of | 
D: \Inetpub\wwwroot \Survey\classes\symantec\itools\multimedia\ vti_cnf . 


] AnimatorCl6.gif 
FireworkC32.gif 
MovingAnimationClé.gif 
NervousTextC32.gif 
ScrollingTextCl6.gif 
SoundPlayerC32.gif 


aa ae 
AnimatorC32.gif FireworkC16.gif 
ImageViewerCl16.gif ImageViewerC32.gif 
MovingAnimationC32.gif NervousTextC16.gif 
PlasmaC1l6.gif PlasmaC32.gif 
ScrollingTextC32.gif SoundPlayerClé.gif 
18 File(s) 4,240 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\net 


ea ae Les] RelativeURL.class 

3 File(s) 1,619 bytes . 
Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\util 
[.] | eee GeneralUtils.class 


Timer.class ZOrderUtils.class 
5 File(s) 9,479 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\vcafe 


[.] : [..] 
[beanhelp] BundlerSAction.class 
Bundler$Item.class BundlerSKey.class 
Bundler$SymText.class Bundler$Window.class 
Bundler.class BundlerNode.class 
[commtool] DependentDialog$Action.class — 
DependentDialog$Key.class Dependent Dialog$Window.class 
DependentDialog.class Dependentitem.class 
ErsatzFile.class InternalMapper.class 

| 18 File(s) 37,755 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\vcafe\beanhelp 


[ed | bucey 
BackRunContainer.class BackRunMemberInfo.class 
BackRunMenu.class BackRunMenuBar.class 
BackrunObjectCreator.class BackRunParent.class 


[beaninfo] ClassInfo.class 
Convert ToVPOSHelper.class ConvertTovPO.class 


DoOnBean.class feditors] 
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ImageData.class InputStreamProducer.class 


JarClassInfo.class Jarinfo.class 

JarManager.class LoadedJar.class 
Manifest.class -MessageHeader.class 
Objectinfo.class | Obj InputStreamWithLoader.class 
SimpleClassLoader.class [simpleresource] 


26 File(s) 77,551 bytes 


Directory of 7 
D: \Inetpub\wnwroot \Survey\classes\synantec\itools \veafe\beanhelp\beaninfo | 


[-] [..] 


CanvasBeaniInfo.class | ComponentBeanInfo.class 
ContainerBeanInfo.class | PanelBeanInfo.class 
TextComponentBeanInfo.class TextFieldBeanInfo.class 


8 File(s) 24,595 bytes 


Directory of 
De: \ Inet pub \wwwroot \Survey\classes\symantec\itools\vcafe\beanhelp\editors 


(.] iu] 


BooleanEditor.class © CharacterEditor.class 
CheckboxGroupEditor.class ColorEditor.class 
CursorEditor.class FontEditor.class 
IntegerEditor.class | ? LayoutManagerEditor. class 
RectangleEditor.class | StringArrayEditor.class 
StringEditor.class SymPropertyEditorSupport.class 
URLArrayEditor.class URLEditor.class 


UseParentsBackgroundEditor.class UseParentsFontEditor.class 
UseParentsForegroundEditor.class | : 
19. File(s) 18,547 bytes 


Directory of 
D: \Inetpub\wwwroot \Survey\classes\synantec\itools\vcafe\beanhelp\simpleresource 


[.] | [..] 


Handler.class | SimpleResourceConnection.class 
4 File(s) 3,042 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\itools\vcafe\commtool 


[.] [.-] 


Memory.class MeterTool$l1.class 
MeterToolSSymIitem. class - MeterToolsSymWindow.class 
MeterTool.class 


7 File(s) | 7,771 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\symantec\tools 


a [..] | [debug] [java] [javac] [ttydebug] 
6 File(s) a 0 bytes - 


Directory of D: \Inetpub\wwwroot \Survey\classes\symantec\tools\debug 


[.] 
[..] 


Agent.class 
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AgentConstants.class 
Agentin.class 
AgentOutputStream.class 
BreakpointHandler.class 
BreakpointQueue.class 
BreakpointSet.class 
DebuggerCallback.class 
EmptyApp.class 
ExecReRouter.class | 
ExpressionOutOfContextException.class 
ExpressionWrongNumberLocalVarsException.class 
Field.class 
InvalidPCException.class 
LineNumber.class | 
LocalComminputStream.class 
LocalCommOutputStream.class 
LocalCommStream.class 
LocalVariable.class 
MainThread.class 
NoSessionException.class 
NoSuchFieldExcéption.class 
NoSuchLineNumberException.class 
RemoteAgent.class 
RemoteArray.class 
RemoteBoolean.class 
RemoteByte.class 
RemoteChar.class 
RemoteClass.class 
RemoteDebugger.class 
RemoteDouble.class 
RemoteField.class 
RemoteFloat.class 
RemoteInt.class 
RemoteLong.class 
RemoteObject.class 
RemoteShort.class 
RemoteStackFrame.class 
RemoteStackVariable.class 
RemoteString.class 
RemoteThread.class 
RemoteThreadGroup.class 
RemoteValue.class 
ResponseStream.class 
StackFrame.class 
SymDbgExec.class 
SymDbgExprFindContext.class 
SymDbgExprHandler.class 
SymDbgExprResult.class 
SymDbgLoadExpr.class 
SymDbgNotify.class 
SymDbgProcess.class 
ThreadList.class 

55 File(s) 136,888 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\symantec\tools\java 


[.] . > East 
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VEDbgJavaDataRec.class | VEDbgJavaDebug.class 


VEDbgJavaintf.class VEDbgJavaKernel.class 
VEDbgJavaMsgRouter.class VEDbgJavaRemoteApp.class 
VEDbgJavaResource.class VEDbgJavaResource ja.class 
VEDbgJavaRuntimeCmd.class 

| 11 File(s) 39,759 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\symantec\tools\javac 


fea eC BatchEnvironment.class 
BatchParser.class ErrorConsumer.clas ErrorMessage.class 
JavaIDDE.class Main.class : 

| 8 File(s) 33,103 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\symantec\tools\ttydebug 


ea Pec} TTY.class 
3 File(s) 28,429 bytes 


Directory of D: \Inetpub\wwwroot \Survey\classes\weblogic 


[.] [.-] [jdbc] | 
3 File(s) O bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\weblogic\jdbc 


] {[common4 ] [microsoft4] [sybase4] 


[.] oo 
5 File(s) QO bytes 


a 


Directory of D:\Inetpub\wwwroot \Survey\classes\weblogic\jdbc\common4 


fe | ead | [compression] [eryptography] [10] 
[net] [sql] f{util] 
8 File(s) 0 bytes 


Directory of | 
D: \Inetpub\wwwroot \Survey\classes\weblogic\jdbc\common4\compression 


[.] base | Compressor.class 


LzssCompressor.class LzssNode.class TdsCompressor.class 
6 File(s) 3,880 bytes 


Directory of 
D: \Inetpub\wwwroot \Survey\classes\weblogic\jdbc\common4\cryptography 


[.] . ikea 

BlowfishCryptographer.class Cryptographer.class 

DESCryptographer.class XorCryptographer.class 
6 File(s) 38,039 bytes 


Directory of D: \Inetpub\wwwroot \Survey\classes\weblogic\jdbc\common4\io 


[.] | [-.] 


AsciiInputStream.class BufferedFilteriInputStream.class 
BufferedFilterOutputStream.class CompressedInputStream.class 
CompressedOutputStream.class EncryptediInputStream.class 
EncryptedOutputStream.class HexInputStream.class 
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UnicodeInputStream.class | 
11 File(s) 10,326 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\weblogic\jdbc\common4 \net 
[.] | eed] SocketExtras.class 
SocketTimeout.class | | 

4 File(s) 4,352 bytes 
Directory of D:\Inetpub\wwwroot \Survey\classes\weblogic\jdbc\common4\sql 


[.} | ae 


AsyncWriter.class BaseConnection.class 
BaseHandler.class BaseString.class 
ConnectDriver.class ConnectionInfo.class 
JdbcExpandedSqlParser.class | MicrosoftConnection.class 
MicrosoftDatabaseMetaData.class MicrosoftLoginStatement.class 
TdsCallableStatement.class TdsColumnMetaData.class 
_TdsConnection.class TdsDatabaseMetaData.class 
TdsEntry.class TdsException.class 
TdsInputStream.class TdsLoginStatement.class 
TdsOutputStream.class TdsParameter.class 
TdsPreparedinputStream.class TdsPreparedStatement.class 
TdsResultSet.class ! TdsResultSetMetaData.class 
TdsStatement.class 
27 File(s) 142,174 bytes 


Directory of D:\Inetpub\wwwroot\Survey\classes\weblogic\jdbc\common4\util 


a e [..] BitsArray.class Day.class 
4 File(s) 2,822 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\weblogic\jdbc\microsoft4 


re ieee | - Driver.class 
3 File(s) 859 bytes 


Directory of D:\Inetpub\wwwroot \Survey\classes\weblogic\jdbc\sybase4 


[.] ee | Driver.class 
3 File(s) 841 bytes 


Directory of D:\Inetpub\wwwroot\Survey\images 


{.] eee COMPASS .GIF Connie.jpg DENIM. JPG 
DESERT .GIF FRY.GLE help.gif IND-DECK.GIF IND-STRN.GIF 
RADAR.GIF P.veL ent] 


12 File(s) 240,069 bytes 


Directory of D:\Inetpub\wwwroot \Survey\images\_vti_cnf 


2) ee COMPASS .GIF Connie.jpg DENIM. JPG 
’ DESERT.GIF FLY.GIF IND-DECK.GIF IND-STRN.GIF  RADAR.GIF 
10 File(s) 2,253 bytes 


Directory of D:\Inetpub\wwwroot \Survey\javascript 
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[oJ bean | checksurvey.js clearsurvey.]js 
[ vti_cnf] 

5 File(s) | 9,549 bytes 
Directory of D:\Inetpub\wwwroot\Survey\javascript\_vti_cnf 


Le] ee _checksurvey.js 
3 File(s) 117 bytes 


Directory of D:\Inetpub\wwwroot\Survey\sounds 


fi.) eee | bluesbro.mid GONNAFLY . MID mission.mid 
SAWYER.MID viewkill.mid 
7 File(s) 196,659 bytes 


Directory of D:\Inetpub\wwwroot\Survey\ vti_cnf 


[.] ior Applet .html Survey. html 
4 File(s) 1,156 bytes 


Directory of D:\Inetpub\wwwroot\surveyadmin 


[.] feat ADOVBS.inc global.asa test.asp 
5 File(s) ' 9,708 bytes 


Directory of D: \Inetpub\wwwroot \time 


[.] Eee] [classes] | TimeZone.html 
4 File(s) | 1,074 bytes 


Directory of D:\Inetpub\wwwroot\time\classes 


[.] 

[..] ; 
AboutDialog$SymAction.class 

About Dialog$SymWindow.class 
AboutDialog.class 

AboutDialog.java 
ColorPaletteSSymMouse.class 
ColorPaletteSSymMouse.obj 
ColorPalette$SymMouseMotion.class 
ColorPalette$SymMouseMotion.obj 
ColorPaletteS$SymWindow.class 
ColorPalette.class 

ColorPalette.java 
QuitDialog$SymAction.class 
QuitDialog$SymWindow.class 
QuitDialog.class 

QuitDialog.java 

[symantec] 

TimeApplet $SymMouse. class 
TimeApplet.class 

TimeApplet.java 

titiereancappl icatvonssomaceien- class 
TimeFrameApplication$SymComponent.class 
TimeFrameApplicationSSymMouse.class 
TimeFrameApplication$SymWindow.class 
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TimeFrameApplication.class 

TimeFrameApplication.java 

TimeZone.html 

TimeZoneUpdater.class 

TimeZoneUpdater. java : 
30 File(s) 75,143 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec 


Led [es] [beans]:° [dti] [itools] [tools] 
6 File(s) O bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\beans 


fa] SAL ete) Beans.class 
3 File(s) 734 bytes 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\dti 


[-] 

[-.] 

BogusComponent.class 
ComboBoxDesignTimeInterface.class 
ControlDesignTimeInterface.class 
CustomPropEditFrame.class 
DefaultAwtComponentDesignTimeiInterface.class 
DefaultAwt PanelDesignTimeInterface. class 
Eventinfo.class 
EventParaminfo.class 
JBlenderFrame.class 
JBlenderFrameCreateParams.class 
JBlenderMain.class 
JBlenderPanel.class 
JBlenderPanelGridiInfo.class 
JBlenderReqQueue.class 
JBlenderRequest.class 
JClassLoader.class 
JCustomPropFrame.class 
JDebugStr.class 
JInvokeThread.class 
NewFont.class 

PropIinfo.class 
PropInfoBoolean.class 
PropiInfoCharacter.class 
PropiInfoColor.class 
PropiInfoCustom.class 
PropinfoDouble.class 
PropinfoDynamic.class 
PropinfoEnum.class 
PropinfoFont.class 
PropInfolInteger.class - 
PropInfoInterface.class 
PropInfoString.class 
PropInfoStringArray.class 
PropInfoURL.class 
PropMethod.class 

Queue.class 
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ScrollingNames$JPActionHandler.class 
ScrollingNamesS$SymComponent.class 
ScrollingNames.class 
ScrollingPanelDesignTimeInterface.class 
SlideShowDesignTimeInterface.class 
StarMainSSymWindow.class 

StarMain.class 

stars.gif 
StdAwtButtonDesignTimeInterface. class 
StdAwtCheckboxDesignTimeInterface.class 
StdAwtChoiceDesignTimeInterface.class 
StdAwtLabelDesignTimeInterface.class 
StdAwtScrollbarDesignTimeInterface.class 
StdAwtTextAreaDesignTimeInterface.class 
StdAwtTextComponentDesignTimeInterface.class - 
StdaAwtTextPieldDesignTimeiIntertace. class 


symName.class 
TabPanelDesignTimeInterface. class 
TestFrame.class 
TreeViewDesignTimeInterface.class 


VCFormCompListener$AddRemoveListener. class 


vCFormCompListenerSItem.class oe 
VCFormCompListener.class 


WrappingLabelDesignTimeInterface.class 


[_ vti_cnf] 
63 File(s) 


111,563 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\dti\ vti_cnf 


stars.gif 


[.] Peek ~ 
3 File(s) 


265 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools 


fawt ] 
fnet ] 


[.] fais] 
[lang] | fmultimedia] 
11 File(s) 


[demo } 


[beans] [db] 
[util] [vcafe] 
0 wyuse 


Directory of D: \Inetpub\wawroot \time\classes\symantec\itools\awt 


[.] 

AlignStyle.class 
BaseTabbedPanelS$Mouse.class 
BaseTabbedPanelBeanInfo.class 
BorderPanel$Veto.class 
BorderPanelBeanInfo.class 
BorderPanelC32.gif 
ButtonBaseSBevelVeto.class 
ButtonBaseS$FrameVeto.class: 
ButtonBaseSMouse.class 
ButtonBaseBeaniInfo.class 
ComboBox$Focus.class 
ComboBox$KeyBox.class 
ComboBoxSMouse.class 
ComboBoxBeanInfo.class 
ComboBoxC32.gif 
CompareFunc.class 


[..] | 
BaseTabbedPanelS$Action.class 
BaseTabbedPanel.class 
BevelStyle.class 
BorderPanel.class 
BorderPanelCl6.gif 
ButtonBaseSAction.class 
ButtonBase$Focus.class 
ButtonBaseSKey.class 
ButtonBase.class 
ComboBoxSAction.class 
ComboBoxSItem.class 
ComboBoxSKeyList.class 
ComboBox.class 
ComboBoxC16.giff 
CompareCells.class 
CompareFuncCB.class 


300 





DirectionButtonS$IndntVeto.class 
DirectionButton.class 
DirectionButtonCl6.gif 
FormattedTextFieldSKey.class 
FormattedTextFieldBeaniInfo.class 
FormattedTextFieldC32.gif 
HorizontalSliderSMouseMtn.class 
HorizontalSliderBeanInfo.class 
HorizontalSliderC32.gif 
HorizontalSliderThumbBot.class 
HorizontalSliderThumbTop.class 
ImageButton$StyleVeto.class 
ImageButtonBeanInfo.class 
ImageButtonC32.gif - 
ImageHTMLLinkBeanInfo.class 
ImageHTMLLinkC32.gif 
ImageListBox$Key.class 
ImageListBox$MouseMotion.class 
ImageListBoxBeanInfo.class 
TImageListBoxC32.gif 
ImagePanelBeanInfo.class 
ImagePanelC32.gif 
InvisibleButton$Mouse.class 
InvisibleButtonBeanInfo.class 
InvisibleButtonC32.gif 
InvisibleHTMLLinkSMouse.class 
InvisibleHTMLLinkBeanInfo.class 
InvisibleHTMLLinkC32.gif 
KeyPressManagerPanelSK.class 
KeyPressManagerPanelBeanInfo.class 
KeyPressManagerPanelC32.gif 
Label3DBeanInfo.class 
Label3DC32.gif _ 
LabelButton$VAVeto.class 
LabelButtonBeanInfo.class 
LabelButtonC32.gif 
LabelHTMLLinkBeanInfo.class 
LabelLHTMLLinkC32.gif 
Matrix.class 

‘fmultiList] 
MultiList$SFocus.class 
MultiList$SMouse.class 
MultiList.class 
MultiListCl6é.gif 
Orientation.class | 
RadioButtonGroupPanelBeanInfo.class 
RadioButtonGroupPanelC32.gif 
RollOverButton$MouseMtn.class 
RollOverButtonBeanInfo.class 
RollOverButtonC32.gif 
ScrollingPanelBeanInfo.class 
ScrollingPanelC32.gif 
Slider.class | 
SliderTick.class 
SplitterPanelSMouseMtn.class 
SplitterPanel.class 
SplitterPanelC16.gif 








DirectionButtonS$SizeVeto.class 
DirectionButtonBeanInfo.class 
DirectionButtonC32.oq1£ 
FormattedTextField.class 


-FormattedTextFieldCl6.gif 


HorizontalSlider$Mouse.class 
HorizontalSlider.class 
HorizontalSliderCl16.gif 
HorizontalSliderThumb.class 
HorizontalSliderThumbBoth.class 
[image] 

ImageButton.class 
ImageButtonC16.gif 
ImageHTMLLink.class 
ImageHTMLLinkC16.gif 
ImageListBoxSAdjustment.class 
ImageListBox$Mouse.class 
ImageListBox.class 
ImageListBoxC1l6.gif 
ImagePanel.class 
ImagePanelC16.gif 
InvalidTreeNodeException.class 
InvisibleButton.class 
InvisibleButtonC16.gif 
InvisibleHTMLLinkSAction.class 
InvisibleHTMLLink.class 
InvisibleHTMLLinkC16.gif _ 
KeyPressManagerPanelSA.class 
KeyPressManagerPanel.class 
KeyPressManagerPanelCl6. a 
Label3D.class 

Label3DC16.gif 
LabelButton$HAVeto.class 
LabelButton.class 
LabelButtonC16.gif 
LabelHTMLLink.class 
LabelHTMLLinkC1l6.gif 
ListItem.class 
MatrixEnumeration.class 
MultiListSAdjustment.class 
MultiList$Key.class 
MultiList$MouseMotion.class 
MultiListBeanInfo.class 
MultiListC32.gif 
RadioButtonGroupPanel. class 
RadioButtonGroupPanelCl6.gif 
RollOverButton$Mouse.class 
RoliOverButton.class 
RollOverButtonc16.gif 
ScrollingPanel.class 
ScrollingPanelCl6. get 
[shape] 

SliderBeanInfo.class 
SplitterPanel$Mouse.class 
SplitterPanel$STVeto.class 
SplitterPanelBeanInfo.class 
SplitterPanelC32.gif 
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StateCheckBoxSMouse.class 
StateCheckBoxBeanInfo.class 
StateCheckBoxC32.gif 
StatusBarBeanInfo.class 
StatusBarC32.gif 
TabPanel.class 
TabPanelCl6.gif 
TransparencyTrick.class 
TreeNode.class 
TreeViewSFocus.class 
TreeViewSMouse.class 
TreeViewBeaninfo.class 
TreeViewC32.gif 
VerticalSliderSMouse.class 
VerticalSlider.class 
VerticalSliderClé.gif 
VerticalSliderThumb.class 


VerticalSliderThumbLeft.class 


WrappingLabel.class 
WrappingLabelCl16.gif 
[ vti_cnf] 

189 File(s) 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\itools\awt\image 


ee here 
FadeFilter.class 
5 File(s) 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\itools\awt\multiList 


[.] 
Cell.class 


TextAndImageCell.class 
5 File(s) 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\itools\awt\shape 


[.] 
Circle.class 
CircleC16.gif 
Ellipse.class 
EllipseC16.gif 
HorizontalLine.class 
HorizontalLineCl6.gif 
Line.class 
LineC16.gif 
Rect.class 
RectCleé.gif 
Shape.class 
Square.class 
SquareCl6.gif 
VerticalLine.class 
VerticalLineCl6.gif 
[ vti_cnf) 

33 File(s) 


StateCheckBox.class 
StateCheckBoxCl6.gif 
StatusBar.class 
StatusBarCl6.gif 
TabPanelSPropertyChange.class 
TabPanelBeanInfo.class 


TabPanelC32.gif 


TransparencyTrickUtils.class 
TreeViewSAdjustment.class 
TreeViewSKey.class 
TreeView.class 
TreeViewC16.gif 

futil] 

Son caper eeesaueeee ase 
VerticalSliderBeanInfo.class 
VerticalSliderC32.gif 
VerticalSliderThumbBoth.class 
VerticalSliderThumbRight.class 
WrappingLabelBeaniInfo.class 


LightenFilter.class 


WrappingLabelC32.gif 


652,892 bytes 


DarkenFilter.class 


7,631 bytes 


fea 
CompareTextAndImageCells.class 


4,490 bytes 


feu] | 
CircleBeanInfo.class 
Circlec32.gi£ 
EllipseBeanIinfo. class 
EllipseC32.g1if 
HorizontalLineBeanIinfo.class 
HorizontalLineC32.gif 
LineBeanInfo.class 
LineC32.gif 
RectBeanInfo.class 
REGECS2Z..g2 tf: 
ShapeBeanInfo.class 
SquareBeanInfo.class. 
SquareC32.gif 
VerticalLineBeaninfo. class 


 VerticalLineC32.gif 


47,004 bytes 
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Directory of D: \Inetpub\wwwroot \time\classes\symantec\itools\awt\shape\_vti_cnf 


[.] [-.] 
Civelec32.ait 
HorizontalLineC16.gif 
 LneCs2 «git 
SquareCl6.gif 
VerticalLineC32.gif | 
16 File(s) 


EllipseC16.gif 
HorizontalLineC32.gif 
RectCl6.gif 
SquareC32.gif 


CircleCl6.gif 
EllipseC32.gif 
LineC1l6.gif 
RectC32.gif 
VerticalLineCl16é.gif 


3,710 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\awt\util 


[-] 
CalendarSAction.class 
Calendar.class 
Calendarcl6.gif 
ColorUtils.class 
[edit] 
ProgressBarBeaninfo.class 
ProgressBarC32.gif 
StatusScroller.class 
StatusScrollerC1l6.gif 
ToolBarPanel$Veto.class 
ToolBarPanelBeaninfo.class 
ToolBarPanelC32.gif 
ToolBarSpacer.class 
ToolBarSpacerCl1l6.gif 
Util.class | 

32 File(s) 


[.-] 


Calendar$Mouse.class 


CalendarBeaninfo.class 


CalendarC32.gif 
[dialog] 
ProgressBar.class 
ProgressBarCl6é.gif 
[spinner] | 
StatusScrollerBeaniInfo.class 
StatusScrollerC32.gif 
ToolBarPanel.class 
ToolBarPanelC16.gif 
ToolBarSpacer$Veto.class 
ToolBarSpacerBeanInfo.class 
ToolBarSpacerC32.gif 
[ vti_cnf] 

93,195 bytes 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\itools\awt\util\dialog 


[--] 
4 File(s) 


[.] 


DialogBox.class ModalDialog.class 


2,449 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\awt\util\edit 


[.] 

AddressCode.class 
IntlLongDistPhoneNumber.class 
IntlLongDistPhoneNumberC16.gif 
LocalPhoneNumber.class 
LocalPhoneNumberC16.gif 
LongDistPhoneNumber.class 
LongZipCode.class 
LongZipCodeC16.gif 
“PhoneNumber.class 
PostalCode.class 
PostalCodeC16.gif 
SocialIDNumber.class 
SocialInsuranceNumber.class 
SocialInsuranceNumberC16.gif 
SocialSecurityNumber.class 
SocialSecurityNumberCl6.gif 
USLongDistPhoneNumber.class 
USLongDistPhoneNumberC16.gif 
ZipCode.class 


[..] 

AddressCodeBeanInfo.class 
IntlLongDistPhoneNumberBeanInfo.class 
IntlLongDistPhoneNumberC32.gif 
Local PhoneNumberBeanInfo.class 
LocalPhoneNumberC32.gif 

LongDist PhoneNumberBeanInfo.class 
LongZipCodeBeanInfo.class 
LongZipCodeC32.gif 
PhoneNumberBeanInfo.class 
PostalCodeBeanInfo.class 
PostalCodeC32.gif | 
SocialIDNumberBeanInfo.class 
SocialInsuranceNumberBeanIinfo.class 
SocialinsuranceNumberC32.gif 
SocialSecurityNumberBeanInfo.class 
SocialSecurityNumberC32.gif 
USLongDist PhoneNumberBeanInfo.class 
USLongDistPhoneNumberC32.gif — 
ZipCodeBeanInfo.class 
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ZipCodeC1l6.gif : ZipCodeC32.gif 
[ -VUi. Cnt] | 
43 File(s) : 44,980 bytes 


Directory of 
D: \Inetpub\wwwroot \time\classes\symantec\itools\awt\util\edit\_ ea 7 enf 


[.] [oo : 
IntlLongDistPhoneNumberC16.gif IntlLongDistPhoneNumberC32.gif 


LocalPhoneNumberCl6.gif LocalPhoneNumberC32.gif 
LongZipCodeC16.gif - 4 LongZipCodeC32.gif 
PostalCodeC16.gif PostalCodeC32.gif 
SocialInsuranceNumberC1l6.gif SocialInsuranceNumberC32.gif 
SocialSecurityNumberC1l6.gif SocialSecurityNumberC32.gif 
USLongDist PhoneNumberCl6. gif USLongDistPhoneNumberC32.gif 
ZipCodeC16.gif ZipCodeC32.gif 


18 File(s) a 4,240 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\awt\util\spinner 


[-] | [..] 


DaySpinner.class DaySpinnerBeanInfo.class 
DaySpinnerC16.gif DaySpinnerC32.gif | 
HorizontalSpinButtonPanel. class ListSpinner.class 
ListSpinnerBeanInfo.class ‘ListSpinnerCl6é.gif 
ListSpinnerC32.gif MonthSpinner.class 
MonthSpinnerBeanInfo.class MonthSpinnerCl6.gif 
MonthSpinnerC32.gif NumericSpinner.class 
NumericSpinnerBeanInfo.class NumericSpinnerCl6.gif 
NumericSpinnerC32.gif SpinButtonPanelSAction.class 
SpinButtonPanel.class SpinnerSAction.class 
SpinnerS$CurrentVeto.class SpinnerSMaxVeto.class_ 
Spinner$MinVeto.class Spinner.class 
SpinnerBeanInfo.class Vert ca lSpTAburienrenes: class 


[ vti_cnf] 
29 File(s) 74,491 pvtes 


Directory of 
D: \Inetpub\wwwroot \time\classes\symantec\itools\awt\util\spinner\_ Ved cnt 


[.] Peel | Hayesinneeere.gie 
DaySpinnerC32. git ListSpinnerCl6.gif ListSpinnerC32.gif 
MonthSpinnerCl6.gif MonthSpinnerC32.gif NumericSpinnerCl6.gif 
NumericSpinnerC32.gif 

10 File(s) | 2,120 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\awt\util\ vti_cnf 


[.] [ai] CalendarCl6.gif 

CalendarC32. gif ProgressBarCl6.gif ProgressBarC32.gif 

StatusScrollerCl6.gif StatusScrollerC32.gif ToolBarPanelCl6.gif 

ToolBarPanelC32.gif ToolBarSpacerCl6.gif ToolBarSpacerC32.gif > 
12 File(s) 2,650 bytes 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\itools\awt\_vti_cnf 


& | eae 


304 








BorderPanelCl6.gif , BorderPanelC32.gif. 


ComboBoxC16.gif | ComboBoxC32.gif 
DirectionButtonC16.gif DirectionButtonC32.gif 
FormattedTextFieldC16.gif FormattedTextFieldC32.gif 
HorizontalSliderClé.gif | Horizontalsiliderc32.0i£ 
ImageButtonclé6.gif ImageButtonC32.gif 
ImageHTMLLinkC1l6.gif ImageHTMLLinkC32.gif 
ImageListBoxC1l6.gif ImageListBoxC32.gif 
ImagePanelC16.gif ImagePanelC32.gif 
InvisibleButtonCl6.gif InvisibleButtonC32.gif 
InvisibleHTMLLinkC16.gif InvisibleHTMLLinkC32.gif 
KeyPressManagerPanelCl6.gif | KeyPressManagerPanelC32.gif 
Label13DC16.gif Label3DC32.gif 
LabelButtoncl6é.gif LabelButtonC32.gif 
LabelHTMLLinkC16.gif LabelHTMLLinkC32.gif 
MultiListCi6.gif | MultiListC32.gif 
RadioButtonGroupPanelC16.gif RadioButtonGroupPanelC32.gif 
RollOverButtonC16.gif RollOverButtonC32.gif 
ScrollingPanelC16.gif ScrollingPanelC32.gif 
SplitterPanelCl6.gif SplitterPanelC32.gif 
StateCheckBoxC16.gif StateCheckBoxC32.gif 
StatusBarCl6.gif StatusBarC32.gif 
TabPanelC16.gif TabPanelC32.gif 
TreeViewC1l6.gif _ TreeViewC32.gif 
VerticalSliderCcl6.gif VerticalSliderC32.gif 
WrappingLabelC16.gif - WrappingLabelC32.gif 

54 File(s) 13,782 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\beans 


24 Eau 


ConnectionDescriptor.class PropertyChangeSupport.class 
SymantecBeanDescriptor.class VetoableChangeSupport.class 
6 File(s) '9,948 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\db 


Li: | ae 


fawt] ConnectionBeanIconColorl6.gif 
ConnectionBeanIconColor32.gif DataSourceIconColorl6é.gif 
DataSourcelIconColor32.gif MediatorDSIconColorl6.gif 
MediatorDSIconColor32.gif MediatorIconColorl6.gif 
MediatorIconColor32.gif [ vti_cnf] 

12 File(s) 4,624 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\db\awt 


[.] [ew] 


ComboBoxC16.gif ComboBoxC32.gif 
DBTstampC16.gif DBTstampC32.gif 
FormattedTextFieldcl6.gif FormattedTextFieldC32.gif 
NervousTextCl6.gif NervousTextC32.gif 
StateCheckBoxC16.gif StateCheckBoxC32.gif 


[ vti_cnf] 
13 File(s) 2,185 bytes 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\itools\db\awt\_vti_cnf 
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ae [..] 
ComboBoxC1l6.gif ComboBoxC32.gif 
DBTstampC16.gif DBTstampC32.gif 
FormattedTextFieldcl6.gif FormattedTextFieldC32.gif 
NervousTextCl6.gif NervousTextC32.gif 
StateCheckBoxC1l6.gif StateCheckBoxC32.gif 

12 File(s) 2,650 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\db\_vti_cnf 


[-] | 7 [ee] : 
ConnectionBeanIconColori6é.gif ConnectionBeanIconColor32.gif 
DataSourceIconColorlé.gif DataSourceIconColor32.gif 
MediatorDSIconColorl6é.gif MediatorDSIconColor32.gif 
MediatorIconColorl6é.gif MediatorIconColor32.gif 

10 File(s) 2,120 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\demo 


Demo.class 


DemoFrame.class 
5,268 bytes | 


a cl 
4 File(s) 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\itools\lang 


] Context.class  OS.class 
3,962 bytes 


[.] | Fé 


4 File(s) 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\multimedia 


[.] 
Animator.class 
AnimatorC16.gif 
AnimatorImage.class 
FireworkBeaninfo.class 
FireworkC32.gif 
ImageViewerBeanInfo.class 
ImageViewerC32.gif 
MovingAnimationBeaninfo.class 
MovingAnimationC32.gif 
NervousTextBeanInfo.class 
NervousTextC32.gif 
PlasmaBeanInfo.class 
PlasmaC32.gif 
ScrollingText$Mouse.class 
ScrollingText.class 
ScrollingTextC16.gif 
SlideShow.class 
SoundPlayerBeaniInfo.class 
SoundPlayerC32.gif 
SoundViewerThread.class 
42 File(s) 


Directory of 


[..] 


-AnimatorBeanInfo.class 


AnimatorC32.gif 
Firework.class 
FireworkCl6.gif 
ImageViewer.class 
ImageViewerC16.gif 
MovingAnimation.class 
MovingAnimationCle.gif 
NervousText.class 
NervousTextCl6é.gif 
Plasma.class 

PlasmaC16.gif 

Rocket.class | 
ScrollingText$MouseMotion.class 
ScrollingTextBeanInfo.class 
ScrollingTextC32.gif 
SoundPlayer.class 
SoundPlayerCl6.gif 
SoundViewerItem.class 

[ vti_cnf] 


124,452 bytes 


D: \Inetpub\wwwroot \time\classes\symantec\itools\multimedia\_vti_cnf 


eS | Pat 


AnimatorCl16.gif 
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AnimatorC32.gif FireworkC1l6.gif FireworkC32.gif 


ImageViewerCl6.gif ImageViewerC32.gif _ MovingAnimationcl6.gif 
MovingAnimationC32.gif NervousTextCl6.gif NervousTextC32.gif 
PlasmaCl6.gif PlasmaC32.gif ScrollingTextC16.gif 
ScrollingTextC32.gif SoundPlayerC16.gif SoundPlayerC32.gif 

18 File(s) 4,240 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\net 


ize. Fete d RelativeURL.class 
3 File(s) 1,619 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\util 
ee . | Lice} GeneralUtils.class 
Timer.class ZOrderUtils.class 

5 File(s) 9,479 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\vcafe 


[.] [..] 


fbeanhelp] BundlerSAction.class 
BundlerSItem.class | BundlerSKey.class 
BundlerSSymText.class BundlerSWindow.class 
Bundler.class BundlerNode.class 
(commtool]  DependentDialogSAction.class 
DependentDialog$Key.class DependentDialog$Window.class 
Dependent Dialog.class Dependentitem.class 
ErsatzFile.class InternalMapper.class 

18 File(s) ; 37,755 bytes 


Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\vcafe\beanhelp 


[se] een 


BackRunContainer.class BackRunMemberInfo.class 
BackRunMenu.class BackRunMenuBar.class 
BackrunObjectCreator.class BackRunParent.class 
[beaninfo] | ClassInfo.class 
ConvertToVPOSHelper.class ConvertTovVPO.class 
DoOnBean.class [editors] 

ImageData.class InputStreamProducer.class 
JarClassinfo.class - JarInfo.class | 
JarManager.class LoadedJar.class 
Manifest.class MessageHeader.class 
ObjectInfo.class - ObjInputStreamWithLoader.class 
SimpleClassLoader.class . [simpleresource] 


26 File(s) 77,551 bytes 


Directory of 2 
D:\Inetpub\wwwroot\time\classes\symantec\itools\vcafe\beanhelp\beaninfo 


[.] [--] 


CanvasBeanInfo.class ComponentBeanInfo.class 

ContainerBeanInfo.class PanelBeanInfo.class 

TextComponentBeanInfo.class TextFieldBeanInfo.class 
S Fate (s) 24,595 bytes 
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Directory of 
D: \Inetpub\wwwroot \time\classes\symantec\itools\vcafe\beanhelp\editors 


[2] | [eo] 


BooleanEditor.class CharacterEditor.class 
CheckboxGroupEditor.class ColorEditor.class 
CursorEditor.class FontEditor.class 
IntegerEditor.class LayoutManagerEditor.class 
RectangleEditor.class StringArrayEditor.class 
StringEditor.class SymPropertyEditorSupport.class 
URLArrayEditor.class URLEditor.class 


UseParentsBackgroundEditor.class UseParentsFontEditor.class 
UseParentsForegroundEditor.class 
19 File(s) 18,547 bytes 


Directory of 
D: \Inetpub\wwwroot \time\classes\symantec\itools\vcafe\beanhelp\simpleresource 


[.] [..] | 
Handler.class SimpleResourceConnection.class 
4 File(s) 3,042 bytes 
Directory of D:\Inetpub\wwwroot\time\classes\symantec\itools\vcafe\commtool 


[.] ‘[..] 


Memory.class - MeterTool$1.class 
MeterToolSSymitem.class MeterToolSSymWindow.class 
MeterTool.class . 

7 File(s) 7,771 bytes © 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\tools 


[o4 [<3] [debug] [java] [javac] fttydebug] 
6 File(s) 0 bytes 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\tools\debug 


[.] 

[..] 

Agent.class 

AgentConstants.class 

AgentIn.class 

AgentOutputStream.class 
BreakpointHandler.class 
BreakpointQueue.class 
BreakpointSet.class 
DebuggerCallback.class 

EmptyApp.class 

ExecReRouter.class 
ExpressionOutOfContextException. class 
ExpressionWrongNumberLocalVarsException.class 
Field.class 

InvalidadPCException.class 

LineNumber. class 
LocalCommiInputStream.class 
LocalCommOutputStream.class 
LocalCommStream.class 
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LocalVariable.class 
MainThread.class 
NoSessionException.class 
NoSuchFieldException.class 
NoSuchLineNumberException.class 
RemoteAgent.class 
RemoteArray.class 
RemoteBoolean.class 
RemoteByte.class 
RemoteChar.class 
RemoteClass.class 
RemoteDebugger.class 
RemoteDouble.class 
RemoteField.class 
RemoteFloat.class 
RemoteInt.class 
RemoteLong.class 
RemoteObject.class 
RemoteShort.class 
RemoteStackFrame.class 
RemoteStackVariable.class 
RemoteString.class 
‘RemoteThread.class 
RemoteThreadGroup.class 
RemoteValue.class 
ResponseStream.class 
StackFrame.class 
SymDbgExec.class | 
SymDbgExprFindContext.class 
SymDbgExprHandler.class 
SymDbgExprResult.class 
SymDbgLoadExpr.class 
SymDbgNotify.class 
SymDbgProcess.class 
ThreadList.class | 
55 File(s) 136,888 bytes 


Directory of D: \Inetpub\wwwroot \time\classes\symantec\tools\java 


[.] [ee] 


VEDbgJavaDataRec.class VEDbgJavaDebug.class 
VEDbgJavaintf.class VEDbgJavaKernel.class 
VEDbgJavaMsgRouter.class VEDbqJavaRemoteApp.class 
VEDbgJavaResource.class VEDbgJavaResource ja.class 
VEDbgJavaRuntimeCmd.class 

11 File(s) 39,759 bytes 


“Directory of D: \Inetpub\wwwroot \time\classes\symantec\tools\javac 


[.] | Pee seil BatchEnvironment.class 
BatchParser.class ErrorConsumer.class ErrorMessage.class 
JavaIDDE.class _ Main.class, 

8 File(s) 33,103 bytes 


Directory of D: \Inetpub \wwwroot \time\classes\symantec\tools\ttydebug 


se eel Pees TTY.class 
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3 File(s) 28,429 bytes 
Directory of D:\Inetpub\wwwroot\ private 


[.} [..] 
2 File(s) O bytes 


Directory of D:\Inetpub\wwwroot\ vti_bin 


fpcount.exe shtml.dll 
2 File(s) 121,616 bytes 


Directory of D:\Inetpub\wwwroot\_vti_bin\_vti_adm 


admin.dil 
1 File(s) 15,120 bytes 


Directory of D:\Inetpub\wwwroot\ vti_bin\_vti_aut 


author.dll dvwssr.dll | 
2 File(s) | 21,536 bytes 


Directory of D:\Inetpub\wwwroot\_vti_cnf 


AdvertisementRotator.asp Advertisements.txt 
default.asp index.asp 
ManipulatingTextStreams.asp normal.asp 
NumberError.html ThankYou.html 
WebBrowserCapabilities.asp 


9 File(s) . 5,048 bytes 


Directory of D:\Inetpub\wwwroot\_vti_pvt 


access.cnf . botinfs.cnf bots.cnf deptodoc.btr 
linkinfo.cnf service.cnf service.lck services.cnf 
unigqperm.cnf writeto.cnf | 

| 12 File(s) 24,551 bytes 


Total Files Listed: 
3728 File(s) 15,812,582 bytes 
925,600,768 bytes free 
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doctodep.btr 
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APPENDIX J. DEPARTMENT OF THE NAVY WORLDWIDE WEB POLICY 


ADMINISTRATIVE MESSAGE 

ROUTINE a oe 

R 211930Z OCT 98 ZYB MIN PSN 498013825 

FM SECNAV WASHINGTON DC//SN// 

TO ALNAV 

UNCLAS //N01500// 

ALNAV 084/98 

MSGID/GENADMIN/SECNA V// 

SUBJ/DEPARTMENT OF THE NAVY WORLDWIDE WEB POLICY// 
REF/A/DOC/DEPSECDEF/25SEP98/-/NOTAL// 

REF/B/DOC/DOD/18JUL97// 

REF/C/RMG/CNO/21JUL95// 

REF/D/DOC/CNO/18SEP88// 

REF/E/DOC/CNO/29AUG95// 

REF/F/DOC/USC/1974// 

NARR/REF A IS A MEMORANDUM ADDRESSING INFORMATION VULNERABILITY AND 
THE WORLDWIDE WEB. REF B IS DOD POLICY FOR ESTABLISHING AND 
MAINTAINING A PUBLICLY ACCESSIBLE DOD WEB INFORMATION SERVICE. REF 
C, ALCOM 035/95, FORMERLY PROVIDED NAVY GUIDELINES FOR USE OF THE 
INTERNET. THIS ALNAV SUPERSEDES REF C. REF D, OPNAVINST 5510.1H, 
DEPARTMENT OF THE NAVY INFORMATION SECURITY PROGRAM REGULATION, REF 
E, OPNAVINST 3432.1, OPERATIONS SECURITY. REF F, THE PRIVACY ACT OF 

1974, 5 U.S.C. SECTION 552A// 


RMKS/1. AS STATED IN REF A, SOME INFORMATION ON OUR PUBLICLY 

ACCESSIBLE WEB SITES PROVIDES TOO MUCH DETAIL ON NAVAL CAPABILITIES, 
INFRASTRUCTURE, PERSONNEL AND OPERATIONAL PROCEDURES. SUCH DETAIL, 
WHEN COMBINED WITH INFORMATION FROM OTHER SOURCES, MAY INCREASE THE | 
VULNERABILITY OF DOD SYSTEMS AND POTENTIALLY BE USED TO THREATEN OR 
HARASS NAVAL PERSONNEL AND THEIR FAMILIES. 


2. ALL NAVAL COMMANDERS WHO ESTABLISH PUBLICLY ACCESSIBLE WEB SITES 
ARE RESPONSIBLE FOR ENSURING THAT THE INFORMATION PUBLISHED ON THEIR 
SITES DOES NOT COMPROMISE NATIONAL SECURITY OR PLACE DOD PERSONNEL 
AT RISK. THE COMMANDER'S RESPONSIBILITY EXTENDS BEYOND GENERAL 

PUBLIC AFFAIRS CONSIDERATIONS REGARDING THE RELEASE OF INFORMATION 
INTO THE REALM OF OPERATIONAL SECURITY AND FORCE PROTECTION. 
COMMANDERS MUST APPLY COMPREHENSIVE RISK MANAGEMENT PROCEDURES TO 
ENSURE THAT THE CONSIDERABLE MISSION BENEFITS GAINED BY USING THE 

WEB ARE CAREFULLY BALANCED AGAINST THE POTENTIAL SECURITY AND 
PRIVACY RISKS CREATED BY HAVING AGGREGATED INFORMATION MORE READILY 
ACCESSIBLE TO A WORLDWIDE AUDIENCE. 


3. DEFINITION - PUBLICLY ACCESSIBLE WORLDWIDE WEB PAGE: ANY 
WORLDWIDE WEB PAGE, DIRECTLY OR INDIRECTLY, CONNECTED TO THE 
INTERNET/NIPRNET, TO WHICH EXTERNAL ACCESS IS NOT CONTROLLED VIA AN 
AUTHENTICATION MECHANISM; SUCH AS USER ID AND PASSWORD. SITES WHICH 
SOLELY EMPLOY CUSTOMER ADDRESS FILTERING (1.E., RESTRICTING ACCESS 

TO :MIL ADDRESSES) ARE NOT CONSIDERED ADEQUATE TO PRECLUDE PUBLIC 
ACCESSIBILITY. 
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4, ACTION. ALL NAVAL COMMANDERS WHO HAVE ESTABLISHED PUBLICLY 
ACCESSIBLE WEB SITES SHALL IMMEDIATELY REVIEW THE CONTENT OF THOSE 
SITES AND REMOVE THE FOLLOWING INFORMATION: 


A. PLANS OR LESSONS LEARNED WHICH WOULD REVEAL SENSITIVE MILITARY 
OPERATIONS, EXERCISES, OR VULNERABILITIES. 

B. REFERENCE TO ANY INFORMATION THAT WOULD REVEAL SENSITIVE 
MOVEMENTS OF MILITARY ASSETS OR THE LOCATION OF UNITS, INSTALLATIONS, 
OR PERSONNEL WHERE UNCERTAINTY REGARDING LOCATION IS AN ELEMENT OF 
THE SECURITY OF THE MILITARY PLAN OR PROGRAM. | 

C. ALL PERSONAL INFORMATION IN THE FOLLOWING CATEGORIES ABOUT USS. 
CITIZENS, DOD EMPLOYEES AND MILITARY PERSONNEL: 1)SOCIAL SECURITY 
ACCOUNT NUMBERS; 2)DATES OF BIRTH; 3)HOME ADDRESSES AND 4)TELEPHONE | 
NUMBERS OTHER THAN PHONE NUMBERS OF DUTY OFFICES WHICH ARE 
APPROPRIATELY MADE AVAILABLE TO THE GENERAL PUBLIC. IN ADDITION, 
REMOVE NAMES, LOCATIONS AND ANY OTHER IDENTIFYING INFORMATION ABOUT 
FAMILY MEMBERS OF DOD EMPLOYEES AND MILITARY PERSONNEL. 


5. IF DETERMINED THAT THE IMMEDIATE REMOVAL OF INFORMATION WOULD 
ADVERSELY IMPACT ESSENTIAL MISSION ACCOMPLISHMENT WAIVERS MUST BE 
REQUESTED VIA CHAIN OF COMMAND. ALL NAVAL COMMANDERS WILL REPORT 
THROUGH THEIR IMMEDIATE SUPERIOR VIA THE CHAIN OF COMMAND (ISIC) TO 
SECOND ECHELON COMMANDERS WHEN THIS ACTION HAS BEEN COMPLETE. ALL 
SECOND ECHELON COMMANDERS WILL REPORT TO DON CIO UPON COMPLETION OF 
THIS TASKING BY THEIR CLAIMANCY NLT 15NOV98. ALL USMC UNITS WILL 

REPORT THROUGH AC/S C4] POC. 


6. DURING THIS PROCESS, COMMANDERS/COMMANDING OFFICERS WILL EVALUATE 
THE SENSITIVITY OF TECHNOLOGICAL DATA ON THEIR WEB SITES. THESE 
ASSESSMENTS WILL ADDRESS THE EXTENT THAT SUCH INFORMATION, WHEN 
COMPILED WITH OTHER UNCLASSIFIED INFORMATION, REVEALS AN ADDITIONAL 
ASSOCIATION OR RELATIONSHIP THAT MEETS THE STANDARDS FOR 
CLASSIFICATION UNDER SECTION 1.8 (E) EXECUTIVE ORDER 12958. 
RECOMMENDATIONS ADDRESSING THIS ISSUE WILL BE INCLUDED IN REPORTS TO 
RESPECTIVE ISICS AND DON CIO. 


7. A DOD TASK FORCE WILL DEVELOP POLICY AND PROCEDURAL GUIDANCE 
RELATED THAT ADDRESSES THE OPERATIONAL, PUBLIC AFFAIRS, ACQUISITION, 
TECHNOLOGY, PRIVACY, LEGAL AND SECURITY ISSUES RELATED TO THE USE OF 
DOD WEB SITES. THIS GUIDANCE WILL BE PROMULGATED IN APPROXIMATELY 
60 DAYS. DESIGNATED DON INDIVIDUALS WILL PARTICIPATE IN THIS EFFORT 

AS WELL AS DEVELOP TAILORED AMPLIFYING POLICY FOR DON. IN THE 
INTERIM, NAVAL COMMANDERS WILL ENSURE THAT THEIR WEB SITES COMPLY 
WITH THE GUIDANCE PROVIDED IN THIS MESSAGE AND IN REF B. 


8. INTERIM POLICY. NAVAL COMMANDERS SHALL REVIEW THEIR PUBLICLY 
ACCESSIBLE WEB SITES TO ENSURE COMPLIANCE WITH THE FOLLOWING: 

A. ALL INFORMATION SYSTEMS WITH PUBLICLY ACCESSIBLE SERVERS WILL BE 
CERTIFIED, ACCREDITED AND RECEIVE A FORMAL AUTHORIZATION TO OPERATE 
BY THE DESIGNATED APPROVING AUTHORITY (DAA). A NETWORK RISK ANALYSIS 
MUST BE CONDUCTED AS PART OF THE OVERALL NETWORK SECURITY PLAN TO 
DETERMINE THE APPROPRIATE LEVEL OF SECURITY. DON WAN/LAN SYSTEMS 
SECURITY ACCREDITATIONS MUST BE UPDATED TO REFLECT THE ADDITION 

OF, OR EXISTENCE OF, A WEB SERVER OR OTHER INTERNET INFORMATION 
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SERVER. 

B. COMMANDING OFFICERS SHALL APPOINT A PRIMARY AND AN ALTERNATE 
WEBMASTER, IN WRITING, AS THE COMMAND'S WEBMASTER. THE PRIMARY 
WEBMASTER OVERSEES THE COMMAND'S WEB SITE AND ENSURES COMPLIANCE 
WITH CURRENT DIRECTIVES. EACH HOME WEB PAGE WILL HAVE A DESIGNATED 
AUTHOR OR MAINTAINER, WHO WILL BE RESPONSIBLE FOR THE CONTENT 

AND APPEARANCE OF THAT. WEB PAGE. THIS INDIVIDUAL'S ORGANIZATIONAL 
CODE, DATE OF LAST REVISION, AND AN "APPROVED BY" STATEMENT GAW 
SUBPARA E BELOW) SHALL BE INCLUDED IN THE SOURCE CODE FOR EACH WEB 


_ HOME PAGE. SINCE THE INTERNET IS OPEN AND LEGALLY ACCESSED BY THE 


WORLDWIDE PUBLIC, INFORMATION PRESENTED IN PUBLICLY ACCESSIBLE WEB 
SITES REFLECTS ON THE DEPARTMENT OF THE NAVY'S PROFESSIONAL STANDARDS 
AND CREDIBILITY. REGARDLESS OF HOW OR BY WHOM THESE PAGES ARE 
ACTUALLY DEVELOPED, THE APPEARANCE, AND THE ACCURACY, CURRENCY AND 
RELEVANCE OF THIS INFORMATION REFLECTS DIRECTLY, OR INDIRECTLY, ON 
THE DEPARTMENT OF THE NAVY'S IMAGE. INFORMATION RESIDING ON A SERVER 
WITH A .MIL DOMAIN, MAY BE INTERPRETED BY THE WORLDWIDE PUBLIC, 
INCLUDING THE AMERICAN TAXPAYER AND MEDIA, AS REFLECTING OFFICIAL 
DON OR DOD POLICIES OR POSITIONS. THERE IS NO SUCH THING AS A 

PERSONAL OR UNOFFICIAL WEB PAGE ON A ".MIL" SERVER. THESE SERVERS 

AND THE INFORMATION THEY CONTAIN SHALL BE USED ONLY FOR OFFICIAL 
BUSINESS AND IN AN OFFICIAL CAPACITY. DETAILED GUIDANCE REGARDING 
NON-PUBLIC WEB SITES WILL BE PROMULGATED IN FORTHCOMING SECNAV 
POLICY. 

C. PUBLICLY AVAILABLE INFORMATION WILL NOT INCLUDE CLASSIFIED 
MATERIAL, INFORMATION THAT IS SENSITIVE IN NATURE, OR INFORMATION 
THAT COULD ENABLE THE RECIPIENT TO INFER CLASSIFIED INFORMATION. 
REQUIREMENTS FOR INFORMATION SECURITY, TO INCLUDE CLASSIFICATION, 
MARKING, SAFEGUARDING, TRANSMITTING AND DECLASSIFYING, AS 
PROMULGATED IN REF D WILL BE FOLLOWED REGARDING ALL DATA RESIDENT 
ON INFORMATION SYSTEMS. 

D. PUBLICLY AVAILABLE INFORMATION WILL NOT VIOLATE PERSONAL PRIVACY 
OR THE REQUIREMENTS OF THE PRIVACY ACT (REF F). PUBLICLY 

AVAILABLE INFORMATION WILL NOT VIOLATE DOD POLICY THAT PROTECTS THE 
~ DISCLOSURE OF NAMES AND DUTY STATION ADDRESSESS OF INDIVIDUALS WHO 
ARE STATIONED OVERSEAS, ROUTINELY DEPLOYABLE OR IN SENSITIVE UNITS, 
WITH EXCEPTION OF FLAG OFFICERS AND PUBLIC AFFAIRS OFFICIALS. ALL 
COMMANDS WILL ENSURE THAT PHOTOGRAPHS, E-MAIL ADDRESSES, 
ORGANIZATIONAL CHARTS THAT LIST NAMES, AND OTHER BIOGRAPHICAL DATA OF 
INDIVIDUALS ARE NOT PLACED ON PUBLICLY AVAILABLE WEB SITES. NEITHER 
PUBLICLY AVAILABLE WEB SITES, NOR NON-PUBLIC DON WEB SITES WILL 
CONTAIN INFORMATION WHICH WOULD VIOLATE THE PRIVACY ACT. 

E. THE PLACEMENT OF ELECTRONIC READING ROOM MATERIALS ON A COMMAND'S 
WEB SITE MUST BE CLEARED FOR THIRD PARTY DISCLOSURE UNDER THE 
PROVISIONS OF THE FREEDOM OF INFORMATION ACT (FOIA). 

F. PUBLICLY AVAILABLE INFORMATION WILL BE CLEARED THROUGH THE 
COMMAND'S OR ISIC'S PUBLIC AFFAIRS OFFICER (PAO), WHO WILL ENSURE 

THE INFORMATION FOLLOWS ALL CURRENT PUBLIC INFORMATION RELEASE AND 
SECURITY DIRECTIVES AND IS APPROVED FOR RELEASE BY THE COMMAND'S 
PAO/FOIA OFFICIAL PRIOR TO BEING PLACED ON THE COMMAND'S WEB 

SITE. THE PAO WILL REGISTER THE PUBLICLY ACCESSIBLE WEB SITE WITH 

THE GOVERNMENT INFORMATION LOCATOR SERVICE (GILS) IAW PARA 4.3 OF 
REF B. 

G. THE WEB SITE HOME PAGE WILL DISPLAY A TAILORED PRIVACY AND 
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SECURITY NOTICE AS STIPULATED IN PARA 4.4 OF REF B. 
H. ALL EXTERNAL HYPERTEXT LINKS MUST ADHERE TO THE GUIDELINES OF 


PARA 4.5 OF REF B. 


9. PURSUANT TO REF A, DIRECTOR, NAVAL CRIMINAL INVESTIGATIVE SERVICE 
(NCIS) WILL COLLABORATE WITH DIRECTOR OF NAVAL INTELLIGENCE (DNI) TO 
ENSURE A COMPREHENSIVE, MULTI-DISCIPLINE SECURITY ASSESSMENT IS 
CONDUCTED FOR DON WEB SITES WITHIN 3 MONTHS OF PROMULGATION OF THE 
FORTHCOMING DOD POLICY (DISCUSSED IN PARA 5 ABOVE). AN ANNUAL 
ASSESSMENT OF THESE SITES WILL BE CONDUCTED THEREAFTER. 


10. POINTS OF CONTACT REGARDING THIS POLICY ARE THE FOLLOWING: 
A. DON CIO: MR. JOSEPH BROGHAMMER, (703) 602-6901. 

B. CNO N643: CWO2 THOMAS DELAINE (703) 601-1278. 

C. USMC C4I: MS. GILDA MCKINNON (703) 607-5546. 

D. CHINFO: ALAN GOLDSTEIN (703) 695-1887. 


11. RELEASED BY THE HONORABLE JOHN H. DALTON, SECRETARY OF THE 
NAVY .// 


BT 
NNNN 
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